customized server security

  • 95 Views
  • Last Post 12 January 2016
vluu posted this 12 January 2016

Hi,

 We have a request were an app support team needs to be able to start/stop windows services and install apps on their windows servers. We do not want to give them local admin rights. we running 2008 AD and all servers are win2008r2. What would be the best approach to solve this? Any advice/direction appreciated.

 

Thx

Order By: Standard | Newest | Votes
anandh11.v posted this 12 January 2016

Use a service account 
On Tuesday 12 January 2016, <vinhtluu@xxxxxxxxxxxxxxxx> wrote:




Hi,



 We have a request were an app support team needs to be able to start/stop windows services and install apps on their windows servers. We do not want to give them local admin rights. we running 2008 AD and all servers are win2008r2. What would be the best approach to solve this? Any advice/direction appreciated.



 



Thx

show

aakash posted this 12 January 2016

To allow a non-admin to start/stop a Windows service, use domain group policy to customize the security on the service(s) to allow a user/group to start, stop

and restart a service.  In domain group policy, go to Computer Configuration | Policies | Windows Settings | Security Settings | System Services and locate your service. 



 

Do the apps require admin rights?  If portable/extractable versions are available for the app, then consider using those.  Or see if installing to locations outside

of Program Files allows the non-admin to install the app.

 

-Aakash Shah

 

show

Close