Is it possibe to delegate permission to start/stop services on a domain controller remotely without domain admin account ? When I try to connect to a DC via services.msc I am getting Access Denied. I'd like to delegate control to one group to be able to control some of the services. I know I can do that using GPO but at the moment the group is not able to see any services at all.