| Author |
Message |
Ken Long
Guest
|
 Posted:
Wed Dec 15, 2004 11:21 pm Post subject:
Server Operators and Services |
|
|
I want to give a couple people the ability to stop and start services
on a couple of my NT4 servers. I don't want to make them Domain
Admins. I've tried adding them to the Server Operators group but they
still get access errors when they try to stop the service. (This
service is a home-brew http server. It has nothing to do with the OS.)
How can I do this?
Also, we recently upgraded the domain from NT4 Server to Windows 2003
Server but this problem was the same before the switchover.
Eventually, these NT4 servers will be replaced by Windows 2003 Servers
and I'll still need to do this.
Tia,
Ken Long
Albuquerque, NM |
|
| Back to top |
|
 |
Miha Pihler
Guest
|
| Posted:
Thu Dec 16, 2004 12:36 am Post subject:
Re: Server Operators and Services |
|
|
Hi Ken,
This will be possible once you switch over to Windows 2000 or newer
operating system that is member of active directory domain. You can create a
group policy and specify permission on system services per user (group) and
task that they can do (e.g. stop and start the service). You would then
apply the policy to OU (Organization Unit) where the server account resides.
I don't know of any way to do this on Windows NT.
Mike
"Ken Long" <ken@lectrosonics.com> wrote in message
news:dbs0s0pbnnf41moc1c71msc4mtrskkrahq@4ax.com...
| Quote: | I want to give a couple people the ability to stop and start services
on a couple of my NT4 servers. I don't want to make them Domain
Admins. I've tried adding them to the Server Operators group but they
still get access errors when they try to stop the service. (This
service is a home-brew http server. It has nothing to do with the OS.)
How can I do this?
Also, we recently upgraded the domain from NT4 Server to Windows 2003
Server but this problem was the same before the switchover.
Eventually, these NT4 servers will be replaced by Windows 2003 Servers
and I'll still need to do this.
Tia,
Ken Long
Albuquerque, NM
|
|
|
| Back to top |
|
|
Steven L Umbach
Guest
|
| Posted:
Thu Dec 16, 2004 5:31 am Post subject:
Re: Server Operators and Services |
|
|
Subinacl works for W2K/W2003 but I don't think it works under NT4.0. There a
free tool called setacl that claims it can configure permissions on
services. I have not tried it myself but the link below has more details in
you are interested. I would not try it out on an important production
machine, at least without doing a full backup first. --- Steve
http://www.helge.mynetcologne.de/setacl/ --- setacl info.
"Ken Long" <ken@lectrosonics.com> wrote in message
news:dbs0s0pbnnf41moc1c71msc4mtrskkrahq@4ax.com...
| Quote: | I want to give a couple people the ability to stop and start services
on a couple of my NT4 servers. I don't want to make them Domain
Admins. I've tried adding them to the Server Operators group but they
still get access errors when they try to stop the service. (This
service is a home-brew http server. It has nothing to do with the OS.)
How can I do this?
Also, we recently upgraded the domain from NT4 Server to Windows 2003
Server but this problem was the same before the switchover.
Eventually, these NT4 servers will be replaced by Windows 2003 Servers
and I'll still need to do this.
Tia,
Ken Long
Albuquerque, NM
|
|
|
| Back to top |
|
|
Ken Long
Guest
|
| Posted:
Fri Dec 17, 2004 2:51 am Post subject:
Re: Server Operators and Services |
|
|
I'm looking forward to retiring my last few NT4 servers. They served
me well over the years but they're getting tired.
I don't know if it's worth testing setacl for safeness since these
servers will only be here for a couple months more. But, it's nice to
know it exists. Maybe I'll need it when I become a consultant and
venture out on my own <g>.
Thanks,
Ken
On Wed, 15 Dec 2004 17:31:22 -0600, "Steven L Umbach"
<n9rou@nospam-comcast.net> wrote:
| Quote: | Subinacl works for W2K/W2003 but I don't think it works under NT4.0. There a
free tool called setacl that claims it can configure permissions on
services. I have not tried it myself but the link below has more details in
you are interested. I would not try it out on an important production
machine, at least without doing a full backup first. --- Steve
http://www.helge.mynetcologne.de/setacl/ --- setacl info. |
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in