If this is Windows 2003, you need to download a fixed subinacl from Microsoft downloads.
Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Rankin, James R [mailto:[email protected]] Sent: Monday, June 13, 2011 3:41 AM To: NT System Admin Issues Subject: Re: Giving users rights to restart a given service If you can't get subinacl to work, you could try something like wrapping a net start/stop or netsvc command up with elevated rights using CPAU Typed frustratingly slowly on my BlackBerry(r) wireless device ________________________________ From: Oliver Marshall <[email protected]> Date: Mon, 13 Jun 2011 08:08:58 +0100 To: NT System Admin Issues<[email protected]> ReplyTo: "NT System Admin Issues" <[email protected]> Subject: Giving users rights to restart a given service Hi, I'm trying to give a number of users the ability to restart a service on one of our servers. The service is for a bespoke voice recognition service that handles a particular part of our dictation and needs a poke every now and again. I've assigned rights using SUBINACL using; subinacl /service service1 /grant=domain1\user1 = TO However whenever user1 tries to restart the service from the command line using a batch file that basically contains a few SC commands, they get access denied. Any ideas why? From what I can see the SUBINACL command above assigns that user Stop and Start rights to that service and should do the trick. Thanks Olly ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
