Permission for Network Services Account


hi, wanna know permission needs network service account start window services .net aspx page.
the windows service works fine in windows server 2003 in windows server 2008 has problems.
any ideas?

related post: http://forums.msdn.microsoft.com/en-us/netfxbcl/thread/4915b588-574c-43f8-8360-f74b38af8258

 

to start service, account must have start , stop permission on service. however, not sure whether there , special considerations start service aspx page via .net. may need follow-up in msdn forum development specific issues.

 

by default, system , administrators have full control permission on system service. if grant network service account “start, stop , pause” permission, can take 1 of following options:

 

option 1: grant network service account rights using domain group policy configure following options:

 

[computer configuration\windows settings\security settings\system services]

 

in group policy editor, double click service on want apply permission , configure security settings.

 

option 2: grant rights using subinacl.exe

 

subinacl /service \\machinename\servicename /grant=[domainname\]username[=access]

 

you can download subinacl following link:

http://www.microsoft.com/downloads/details.aspx?familyid=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en

 

option 3:  modify dacl service code. can refer following msdn link:

http://msdn.microsoft.com/en-us/library/ms684215(vs.85).aspx


laura zhang - msft


Windows Server  >  Windows Server General Forum



Comments

Popular posts from this blog

server manager error: ADAM.events.xml could not be enumerated.

Cannot access Anywhere Access using domain name?

WMI Failure: Unable to update Local Resource Group