Announcement

Collapse
No announcement yet.

restart service

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • restart service

    I want to allow the helpdesk to restart the print spooler service on every file server.
    Thought that this would easily accomplished by using group policy. Applied a GPO on the file servers OU where I adjusted the spooler in where the helpdesk can start, stop and restart the spooler service.

    However when i try to restart the service as a member of the helpdesk i get access denied. I tried trough the GUI (Services.msc) and the commandline using "sc \\servername stop spooler".

    Browsing the internet show examples using subinacl, but i do not see the point of using this tool as the GPO should have set the permissions correctly. When i run a GPresult on the server i see that the policy is applied.

    what am i missing here?
    [Powershell]
    Start-DayDream
    Set-Location Malibu Beach
    Get-Drink
    Lay-Back
    Start-Sleep
    ....
    Wake-Up!
    Resume-Service
    Write-Warning
    [/Powershell]

    BLOG: Therealshrimp.blogspot.com

  • #2
    Re: restart service

    have you forced the servers to update group policy?

    log onto the servers and in command prompt run: gpupdate /force

    perhaps they havent picke dup the new policy yet.

    Comment


    • #3
      Re: restart service

      I have checked an double checked to see if the policy is applied correctly.
      "GPresult /v /scope computer"
      even rsop shows that the policy is applied correctly.
      [Powershell]
      Start-DayDream
      Set-Location Malibu Beach
      Get-Drink
      Lay-Back
      Start-Sleep
      ....
      Wake-Up!
      Resume-Service
      Write-Warning
      [/Powershell]

      BLOG: Therealshrimp.blogspot.com

      Comment


      • #4
        Re: restart service

        Got a bit further.
        The policy is applied but only works interactive. So when i grant the user access through RDP, he is able start and stop the service as intended.

        I have checked if this behaviour differs between Windows Server 2003 and Windows Server 2008 (R2), but it does not.
        [Powershell]
        Start-DayDream
        Set-Location Malibu Beach
        Get-Drink
        Lay-Back
        Start-Sleep
        ....
        Wake-Up!
        Resume-Service
        Write-Warning
        [/Powershell]

        BLOG: Therealshrimp.blogspot.com

        Comment

        Working...
        X