Giving A Normal User Rights To Control A Service With subinacl

Normally starting and stopping a service requires administrator privileges, but you can assign a normal user the right to control an individual service. You do this with the subinacl.exe utility included in the Windows Resource Kit. You can also download it here:

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en

To give the user “John” the right to start and stop the TestService service, log on as administrator and run the following command:

subinacl /SERVICE “TestService” /GRANT=john=TO

You can also give a user right to control a service through the use of Group Policies:

http://support.microsoft.com/default.aspx?scid=kb;en-us;288129