Role Based Security

Archived from groups: microsoft.public.win2000.security (More info?)

Rights for services is most effectively controlled by use of the
Services node in a GPO. For each service there are policy settings
for both the state (auto/manual/disabled) and also for the security
(who may start, stop, etc.). If you adjust the security of services
be sure that you include full grants to System and if the service
runs as other then System, then that account also, for example for
Local Service one enters Service when adjusting the policies).

--
Roger Abell
Microsoft MVP (Windows Security)

"John" <John@discussions.microsoft.com> wrote in message
news:337B2ED4-F3BE-41F1-8EF2-61E83CC64269@microsoft.com...
> I have a group who needs the following rights across all of our servers:
>
> *Logon to server
> *Restart server
> *Restart services
>
> I know that you can assign the first two utilizing GPO's, but I can not
find
> anything regarding granting the right to restart services without making
the
> users local administrators, which I prefer not to do.
>
> Any suggestions?