Thursday, September 18, 2014

Allow Non-Admin User Start/Stop/Restart Certain Services In Windows 7

In Windows XP

1. Edit the properties of the service and set the Log On user. The appropriate right will be automatically assigned.
2. Add these user (Domain Or Local) into the Power User Group
                                                 But in the case of Windows 7, the Power Users group is never the answer. It's an old legacy thing. So i here with mentioned an Another friendly option for doing the same thing using the subinacl command line tool included in the Windows 2003 Resource Kit.
  1. Login as an administrator.
  2. Download subinacl.exe from Microsoft:
http://www.microsoft.com/en-us/download/details.aspx?id=23510
  1. Grant permissions to user account to manage the services
  2. Open Command Prompt and Navigate to Subincal installed directory
cd C:\Program Files (x86)\Windows Resource Kits\Tools\
Syntax:-
            SUBINACL /SERVICE Servicename /GRANT=Machine Name\UserName=Access
            SUBINACL /SERVICE Servicename /GRANT=DomainName\UserName=Access
The Access permissions you can grant are defined as follows
F : Full Control
R : Generic Read
W : Generic Write
X : Generic eXecute
L : Read controL
Q : Query Service Configuration
S : Query Service Status
E : Enumerate Dependent Services
C : Service Change Configuration
T : Start Service
O : Stop Service
P : Pause/Continue Service
I : Interrogate Service
U : Service User-Defined Control Commands
Eg -If a Domain User :-
             subinacl /service wampapache /grant=amritavidya.edu\jagannathanv=TOP
Eg if a Local user
subinacl /service wampapache /grant=PC1\test=TOP
Eg :- C:\Program Files (x86)\Windows Resource Kits\Tools>subinacl /service wampapache
/grant=sasi\test=TOP
wampapache : new ace for sasi\test
wampapache : 1 change(s)
Elapsed Time: 00 00:00:00
Done:        1, Modified        1, Failed        0, Syntax errors        0
Last Done  : wampapache

2 comments:

  1. Also work with subinacl /service * /grant=PC1\test=TOP for all services.
    Thnx!

    ReplyDelete

bloggerwidgets