Start/Stop service with non-admin user

  • Thread starter Thread starter Steve Roy
  • Start date Start date
S

Steve Roy

Guest
Hi !,
sorry for my english, i'm french speaking.

Since many years, some users can start/stop service remotly on our Win2K0
SP4 server. The domain admin created GPO for this (giving acces for
stop/start/pause some service). Since few weeks, we installed another server
(Windows 2K3 SP1), with same setting, same ACL, same software. The GPO was
deployed but this users cannot now start/stop this services. The only
difference between this 2 installation is: 1 is Windows 2000SP4 and the other
Win2K3 SP1. There is some limitation, or security setting with Win2K3 ? Can
someone help me please !

Thanks !
Steve
 
Re: Start/Stop service with non-admin user

Hello,

what is the targeted service ? Are you sure it has the same name ?
Did you reboot ?

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com...
> Hi !,
> sorry for my english, i'm french speaking.
>
> Since many years, some users can start/stop service remotly on our Win2K0
> SP4 server. The domain admin created GPO for this (giving acces for
> stop/start/pause some service). Since few weeks, we installed another
> server
> (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO
> was
> deployed but this users cannot now start/stop this services. The only
> difference between this 2 installation is: 1 is Windows 2000SP4 and the
> other
> Win2K3 SP1. There is some limitation, or security setting with Win2K3 ?
> Can
> someone help me please !
>
> Thanks !
> Steve
 
Re: Start/Stop service with non-admin user

Bonjour Mathieu,
J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien défini
et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve rien.
Merci de m'aider

"Mathieu CHATEAU" wrote:

> Hello,
>
> what is the targeted service ? Are you sure it has the same name ?
> Did you reboot ?
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com...
> > Hi !,
> > sorry for my english, i'm french speaking.
> >
> > Since many years, some users can start/stop service remotly on our Win2K0
> > SP4 server. The domain admin created GPO for this (giving acces for
> > stop/start/pause some service). Since few weeks, we installed another
> > server
> > (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO
> > was
> > deployed but this users cannot now start/stop this services. The only
> > difference between this 2 installation is: 1 is Windows 2000SP4 and the
> > other
> > Win2K3 SP1. There is some limitation, or security setting with Win2K3 ?
> > Can
> > someone help me please !
> >
> > Thanks !
> > Steve
>
>
 
Re: Start/Stop service with non-admin user

re,

please keep in english..(post to the french group next time!)

So you rebooted and the service you want to get managed by users are
livelink97_1 and livelink97_1Admin

From GPMC, can you make a Group Policy Results to be sure GPO is applied ?

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com...
> Bonjour Mathieu,
> J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien
> défini
> et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve rien.
> Merci de m'aider
>
> "Mathieu CHATEAU" wrote:
>
>> Hello,
>>
>> what is the targeted service ? Are you sure it has the same name ?
>> Did you reboot ?
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
>> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com...
>> > Hi !,
>> > sorry for my english, i'm french speaking.
>> >
>> > Since many years, some users can start/stop service remotly on our
>> > Win2K0
>> > SP4 server. The domain admin created GPO for this (giving acces for
>> > stop/start/pause some service). Since few weeks, we installed another
>> > server
>> > (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO
>> > was
>> > deployed but this users cannot now start/stop this services. The only
>> > difference between this 2 installation is: 1 is Windows 2000SP4 and the
>> > other
>> > Win2K3 SP1. There is some limitation, or security setting with Win2K3
>> > ?
>> > Can
>> > someone help me please !
>> >
>> > Thanks !
>> > Steve
>>
>>
 
Re: Start/Stop service with non-admin user

Hi , sorry for the french , yes the GPO are applied :
Livelink97_1 (Mode de démarrage : Automatique)masquer
AutorisationsType Nom Autorisation
Autoriser BUILTIN\Administrateurs Contrôle total
Autoriser PROD\gMRQ-Démarre-Service-Livelink Démarrage, arrêt et pause
Autoriser AUTORITE NT\SYSTEM Contrôle total
Autoriser AUTORITE NT\Utilisateurs authentifiés Lecture

Idem for the other service. the group gMRQ-Démarre-Service-Livelink is a
domain group where the users are member.

"Mathieu CHATEAU" wrote:

> re,
>
> please keep in english..(post to the french group next time!)
>
> So you rebooted and the service you want to get managed by users are
> livelink97_1 and livelink97_1Admin
>
> From GPMC, can you make a Group Policy Results to be sure GPO is applied ?
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
> news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com...
> > Bonjour Mathieu,
> > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien
> > défini
> > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve rien.
> > Merci de m'aider
> >
> > "Mathieu CHATEAU" wrote:
> >
> >> Hello,
> >>
> >> what is the targeted service ? Are you sure it has the same name ?
> >> Did you reboot ?
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> http://lordoftheping.blogspot.com
> >>
> >>
> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
> >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com...
> >> > Hi !,
> >> > sorry for my english, i'm french speaking.
> >> >
> >> > Since many years, some users can start/stop service remotly on our
> >> > Win2K0
> >> > SP4 server. The domain admin created GPO for this (giving acces for
> >> > stop/start/pause some service). Since few weeks, we installed another
> >> > server
> >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO
> >> > was
> >> > deployed but this users cannot now start/stop this services. The only
> >> > difference between this 2 installation is: 1 is Windows 2000SP4 and the
> >> > other
> >> > Win2K3 SP1. There is some limitation, or security setting with Win2K3
> >> > ?
> >> > Can
> >> > someone help me please !
> >> >
> >> > Thanks !
> >> > Steve
> >>
> >>
>
>
 
Re: Start/Stop service with non-admin user

did the user logoff/logon since member of the group ?

any event log / security audit fail ?

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
news:8DC656B8-50D6-4B37-B58D-A18A3413BF66@microsoft.com...
> Hi , sorry for the french , yes the GPO are applied :
> Livelink97_1 (Mode de démarrage : Automatique)masquer
> AutorisationsType Nom Autorisation
> Autoriser BUILTIN\Administrateurs Contrôle total
> Autoriser PROD\gMRQ-Démarre-Service-Livelink Démarrage, arrêt et pause
> Autoriser AUTORITE NT\SYSTEM Contrôle total
> Autoriser AUTORITE NT\Utilisateurs authentifiés Lecture
>
> Idem for the other service. the group gMRQ-Démarre-Service-Livelink is a
> domain group where the users are member.
>
> "Mathieu CHATEAU" wrote:
>
>> re,
>>
>> please keep in english..(post to the french group next time!)
>>
>> So you rebooted and the service you want to get managed by users are
>> livelink97_1 and livelink97_1Admin
>>
>> From GPMC, can you make a Group Policy Results to be sure GPO is applied
>> ?
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
>> news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com...
>> > Bonjour Mathieu,
>> > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien
>> > défini
>> > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve
>> > rien.
>> > Merci de m'aider
>> >
>> > "Mathieu CHATEAU" wrote:
>> >
>> >> Hello,
>> >>
>> >> what is the targeted service ? Are you sure it has the same name ?
>> >> Did you reboot ?
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> http://lordoftheping.blogspot.com
>> >>
>> >>
>> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
>> >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com...
>> >> > Hi !,
>> >> > sorry for my english, i'm french speaking.
>> >> >
>> >> > Since many years, some users can start/stop service remotly on our
>> >> > Win2K0
>> >> > SP4 server. The domain admin created GPO for this (giving acces for
>> >> > stop/start/pause some service). Since few weeks, we installed
>> >> > another
>> >> > server
>> >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The
>> >> > GPO
>> >> > was
>> >> > deployed but this users cannot now start/stop this services. The
>> >> > only
>> >> > difference between this 2 installation is: 1 is Windows 2000SP4 and
>> >> > the
>> >> > other
>> >> > Win2K3 SP1. There is some limitation, or security setting with
>> >> > Win2K3
>> >> > ?
>> >> > Can
>> >> > someone help me please !
>> >> >
>> >> > Thanks !
>> >> > Steve
>> >>
>> >>
>>
>>
 
Re: Start/Stop service with non-admin user

Hi ! yes the user logoff/logon and there is no audit fail.

"Mathieu CHATEAU" wrote:

> did the user logoff/logon since member of the group ?
>
> any event log / security audit fail ?
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
> news:8DC656B8-50D6-4B37-B58D-A18A3413BF66@microsoft.com...
> > Hi , sorry for the french , yes the GPO are applied :
> > Livelink97_1 (Mode de démarrage : Automatique)masquer
> > AutorisationsType Nom Autorisation
> > Autoriser BUILTIN\Administrateurs Contrôle total
> > Autoriser PROD\gMRQ-Démarre-Service-Livelink Démarrage, arrêt et pause
> > Autoriser AUTORITE NT\SYSTEM Contrôle total
> > Autoriser AUTORITE NT\Utilisateurs authentifiés Lecture
> >
> > Idem for the other service. the group gMRQ-Démarre-Service-Livelink is a
> > domain group where the users are member.
> >
> > "Mathieu CHATEAU" wrote:
> >
> >> re,
> >>
> >> please keep in english..(post to the french group next time!)
> >>
> >> So you rebooted and the service you want to get managed by users are
> >> livelink97_1 and livelink97_1Admin
> >>
> >> From GPMC, can you make a Group Policy Results to be sure GPO is applied
> >> ?
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> http://lordoftheping.blogspot.com
> >>
> >>
> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
> >> news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com...
> >> > Bonjour Mathieu,
> >> > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien
> >> > défini
> >> > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve
> >> > rien.
> >> > Merci de m'aider
> >> >
> >> > "Mathieu CHATEAU" wrote:
> >> >
> >> >> Hello,
> >> >>
> >> >> what is the targeted service ? Are you sure it has the same name ?
> >> >> Did you reboot ?
> >> >>
> >> >> --
> >> >> Cordialement,
> >> >> Mathieu CHATEAU
> >> >> http://lordoftheping.blogspot.com
> >> >>
> >> >>
> >> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
> >> >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com...
> >> >> > Hi !,
> >> >> > sorry for my english, i'm french speaking.
> >> >> >
> >> >> > Since many years, some users can start/stop service remotly on our
> >> >> > Win2K0
> >> >> > SP4 server. The domain admin created GPO for this (giving acces for
> >> >> > stop/start/pause some service). Since few weeks, we installed
> >> >> > another
> >> >> > server
> >> >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The
> >> >> > GPO
> >> >> > was
> >> >> > deployed but this users cannot now start/stop this services. The
> >> >> > only
> >> >> > difference between this 2 installation is: 1 is Windows 2000SP4 and
> >> >> > the
> >> >> > other
> >> >> > Win2K3 SP1. There is some limitation, or security setting with
> >> >> > Win2K3
> >> >> > ?
> >> >> > Can
> >> >> > someone help me please !
> >> >> >
> >> >> > Thanks !
> >> >> > Steve
> >> >>
> >> >>
> >>
> >>
>
>
 
Re: Start/Stop service with non-admin user

can you confirm that this output comes from Group Policy Results ?

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
news:8DC656B8-50D6-4B37-B58D-A18A3413BF66@microsoft.com...
> Hi , sorry for the french , yes the GPO are applied :
> Livelink97_1 (Mode de démarrage : Automatique)masquer
> AutorisationsType Nom Autorisation
> Autoriser BUILTIN\Administrateurs Contrôle total
> Autoriser PROD\gMRQ-Démarre-Service-Livelink Démarrage, arrêt et pause
> Autoriser AUTORITE NT\SYSTEM Contrôle total
> Autoriser AUTORITE NT\Utilisateurs authentifiés Lecture
>
> Idem for the other service. the group gMRQ-Démarre-Service-Livelink is a
> domain group where the users are member.
>
> "Mathieu CHATEAU" wrote:
>
>> re,
>>
>> please keep in english..(post to the french group next time!)
>>
>> So you rebooted and the service you want to get managed by users are
>> livelink97_1 and livelink97_1Admin
>>
>> From GPMC, can you make a Group Policy Results to be sure GPO is applied
>> ?
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
>> news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com...
>> > Bonjour Mathieu,
>> > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien
>> > défini
>> > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve
>> > rien.
>> > Merci de m'aider
>> >
>> > "Mathieu CHATEAU" wrote:
>> >
>> >> Hello,
>> >>
>> >> what is the targeted service ? Are you sure it has the same name ?
>> >> Did you reboot ?
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> http://lordoftheping.blogspot.com
>> >>
>> >>
>> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message
>> >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com...
>> >> > Hi !,
>> >> > sorry for my english, i'm french speaking.
>> >> >
>> >> > Since many years, some users can start/stop service remotly on our
>> >> > Win2K0
>> >> > SP4 server. The domain admin created GPO for this (giving acces for
>> >> > stop/start/pause some service). Since few weeks, we installed
>> >> > another
>> >> > server
>> >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The
>> >> > GPO
>> >> > was
>> >> > deployed but this users cannot now start/stop this services. The
>> >> > only
>> >> > difference between this 2 installation is: 1 is Windows 2000SP4 and
>> >> > the
>> >> > other
>> >> > Win2K3 SP1. There is some limitation, or security setting with
>> >> > Win2K3
>> >> > ?
>> >> > Can
>> >> > someone help me please !
>> >> >
>> >> > Thanks !
>> >> > Steve
>> >>
>> >>
>>
>>
 
Back
Top