Non-Administrator Level Access Problem

[jockel]

I want a select group of users to be able to access an Terminal Server
session with the ability to stop/start services and scheduled tasks but not
make them server administrators.

The server environment is Windows 2003 SP1. I have tried using Power Users
but this does not provide access to the services or scheduled tasks.

 

[Munindra Das [MSFT]]

Re: Non-Administrator Level Access Problem

1) To allow non-admins to stop services, you can change the service ACL by
using the tool at
http://www.microsoft.com/downloads/...56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en.

2) To schedule tasks, you will have to allow all non-admins and not a
specific user group. You can do this on a DC using this policy -
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/558.mspx?mfr=true

Both this tasks are admin specific and it is not recommended to allow
non-admins to do these two tasks. This is true particularly for the
scheduled tasks, since that gives a non-admin to schedule tasks that will
run as system. It is equivalent to giving that user admin permission.

--

Thanks!

This posting is provided "AS IS" with no warranties, and confers no rights.

"jockel" <jockel@discussions.microsoft.com> wrote in message
news:3CD949F7-E058-42DE-9B99-CE5CA2707F76@microsoft.com...
>I want a select group of users to be able to access an Terminal Server
> session with the ability to stop/start services and scheduled tasks but
> not
> make them server administrators.
>
> The server environment is Windows 2003 SP1. I have tried using Power
> Users
> but this does not provide access to the services or scheduled tasks.