Keshav
Sat Feb 09 07:45:02 CST 2008
I presume this problem is becuase of the permissions set on the service. The
users (including local administrators) should have appropriate
start/stop/pause permissions on the service before they can start or stop the
service. Service permissions are explained in the below link:
http://technet2.microsoft.com/windowsserver/en/library/a958b9d2-3ec1-4ab0-9f9f-7cb396605f3e1033.mspx?mfr=true
Service permissions can be set either using Security templates (recommended
for workgroup computers) or using Group Policy (recommended for domain
computers).
Using Group Policy:
http://technet2.microsoft.com/windowsserver/en/library/1687ef1d-b382-49c7-b184-a4cc888be5251033.mspx?mfr=true
You can also use SC command to set/modify service permissions:
http://technet2.microsoft.com/windowsserver/en/library/0a658e97-51d5-4109-b461-a474c799964e1033.mspx?mfr=true
SC command method is recommended for work group computers.
Hope this helps. Post back if you have any questions.
-Keshav
-------------------------------------------------------------------------------
Was this a useful post? If yes, click "Yes" below and let others know.
"light_wt" wrote:
> sorry that a simliar queustion may have answered before. this has a new
> twist. :)
>
> I have a domain user account started a service. For reason unknown, Local
> admin can't restart it, or starting it after it was stopped. only one domain
> user have to start it using the password of the domain user.
>
> how can I have it so all users belonging to the group local admin can start
> stop the service without the password of that domain user.
>
> here is the currently output from accesschk. thanks.
>
> C:\>accesschk "DomainName\user1" -vc MSSQLSERVER
>
> AccessChk v4.02 - Check access of files, keys, objects, processes or services
> Copyright (C) 2006-2007 Mark Russinovich
> Sysinternals - www.sysinternals.com
>
> RW MSSQLSERVER
> SERVICE_ALL_ACCESS
>
> --
> ps: the reply button on my browser doesn't work.