Grant users rights to manage services - Windows Server

This article describes how to lớn grant users the authority to lớn manage system services in Windows Server.

By mặc định, only members of the Administrators group can start, stop, pause, resume, or restart a service. This article describes methods that you can use to lớn grant the appropriate rights to lớn users to lớn manage services.

Applies to:   Supported versions of Windows Server
Original KB number:   325349

Method 1: Use Group Policy

You can use Group Policy to lớn change permissions on system services. See How To Configure Group Policies to lớn Set Security for System Services for more information.

Method 2: Use Security Templates

To use security templates to lớn change permissions on system services, create a security template following these steps:

1. Select Start, tìm kiếm mmc.exe and select it.
2. On the File thực đơn, click Add/Remove Snap-in.
3. Select Security Configuration and Analysis, select Add, and then select OK.
4. In the console tree, right-click Security Configuration and Analysis, and then select Open Database.
5. Specify a name and location for the database, and then click Open.
6. In the Import Template dialog box that appears, click the security template that you want to lớn import, and then click Open.
7. In the console tree, right-click Security Configuration and Analysis, and then click Analyze Computer Now.
8. In the Perform Analysis dialog box that appears, accept the mặc định path for the log tệp tin that is displayed in the Error log tệp tin path box or specify the location that you want, and then click OK.

After the analysis is complete, configure the service permissions as follows:

1. In the console tree, select System Services.
2. In the right pane, double-click the service whose permissions you want to lớn change.
3. Select the Define this policy in the database kiểm tra box, and then select Edit Security.
4. To configure permissions for a new user or group, select Add. In the Select Users, Computers, or Groups dialog box, type the name of the user or group that you want to lớn mix permissions for, and then select OK.
5. In the Permissions for User or Group list, configure the permissions that you want for the user or group. When you add a new user or group, the Allow kiểm tra box next to lớn the Start, stop and pause permission is selected by mặc định. This setting permits the user or group to lớn start, stop, and pause the service.
6. Select OK two times.

To apply the new security settings to lớn the local computer, right-click Security Configuration and Analysis, and then click Configure Computer Now.