Sign in
 

none
Assign users the ability to stop/start services on a 2008r2 server in a 2012R2 domain.

 > 

    Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Is there a way to assign users the ability to stop/start specific 3rd party services that run on a 2008r2 server? The DC is a 2012R2 server and only shows the local services in GPMC.

    I have read the article on technet: http://social.technet.microsoft.com/wiki/contents/articles/5752.how-to-grant-users-rights-to-manage-services-start-stop-etc.aspx. The services listed do not include the specific services that I need to assign. I assume that I could use the 'Security Configuration Tool' on the 2008R2 server, but I am concerned that I could cause a problem if I try to import the policy from a 2008R2 server to a 2012R2 server.

    Thanks

    Robert JB

    Sunday, May 15, 2016 10:45 AM
    |

Answers

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello

    two chance

    install gpmc to 2008r2 server and edit gpo on server or create service with new-service same name and path on dc or other workstation where can edit gpo and set what you want

    sorry my english

    Sunday, May 15, 2016 5:00 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote
    The service is already installed on the 2008R2 server. Are you telling me to create the service on the DC using gpmc?

    Robert JB

    Sunday, May 15, 2016 6:44 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello

    if cant install gpmc to application server or other server/workstation only have got dc for with gpmc then create new service on dc from powershell and create gpo and remove service from dc with powershell

    sorry my english

    Sunday, May 15, 2016 6:49 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    I successfully installed gpmc on the 2008r2 server and added the group to access the service.

    What do I have to do on the DC?

    Robert JB

    Sunday, May 15, 2016 7:40 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    nothing :)

    sorry my english


    • Edited by Sneff_Gabor Sunday, May 15, 2016 8:08 PM
    • Marked as answer by Robert JB Monday, May 16, 2016 11:30 AM
    Sunday, May 15, 2016 8:07 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote
    When I go to servics the options to start/stop/restart are grayed-out

    Robert JB

    Sunday, May 15, 2016 9:23 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thank you.

    Robert JB

    Monday, May 16, 2016 11:31 AM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote
    > Is there a way to assign users the ability to stop/start specific 3rd
    > party services that run on a 2008r2 server? The DC is a 2012R2 server
    > and only shows the local services in GPMC.
     
    Yes. Configure ANY service to your needs, then edit the GptTmpl.inf file
    in the GPO's sysvol folder and replace the service name :)
     
    Tuesday, May 17, 2016 11:22 AM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thank you. It started working when I checked enforce policy in gpmc.

    Robert JB

    Tuesday, May 17, 2016 1:11 PM
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Robert,

    You could try to grant rights using Subinacl.exe.

    SUBINACL /SERVICE \\MachineName\ServiceName GRANT=[DomainName\]UserName[=Access]

    For more information, you could refer to the article below.

    Method 3: Grant rights using Subinacl.exe

    https://support.microsoft.com/en-us/kb/288129

    Note: The steps are similar in Windows Server 2003 and Windows Server 2008.

    Best Regards,

    Jay

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, May 23, 2016 10:17 AM
    |
    Moderator