Tuesday, April 26, 2011

Grant User Rights to Start/Stop Windows Services

If you are an Administrator of Windows 2000/2003/xp operating system & need to grant rights for a user to Start/Stop an Windows Service, please follow the below steps.

1. Download & install Subinacl tool from microsoft

2. In Command Prompt,
SUBINACL /SERVICE [\\MachineName\]ServiceName /GRANT=[DomainName\]UserName[=Access]

where [\\MachineName\], [DomainName\] & [=Access] are optional

Example:
E:\Program Files\Windows Resource Kits\Tools>subinacl /service outlookmessengerLS /grant=xyzuser

outlookmessengerLS : new ace for xyzuser
outlookmessengerLS: 1 change(s)


Elapsed Time: 00 00:00:00
Done: 1, Modified 1, Failed 0, Syntax errors 0
Last Done : outlookmessengerLS

For more details: