| One of our previous tips focused on a tool in the Windows 2000 Server Resource Kit called |
| Subinacl.exe. The Resource Kit also includes the Svcacls.exe utility, which allows you to set |
| security permissions on system services. While both Subinacl.exe and Svcacls.exe can work with |
| services, the latter is much easier to use if you only want to grant users specific rights on a service. |
| The syntax of Svcacls.exe is very simple. Typing only svcacls in the command prompt will display |
| the usage screen explaining all the switches and parameters. If you type svcacls spooler in the |
| command prompt, it will list all of the permissions on the spooler service running on the local |
| computer. If you add a computer name in front of the service name (e.g., svcacls\\computer\service), |
| you can query a remote computer. |
| You can also grant permissions by typing the following syntax: |
| Svcacls servicename g:username:access |
| Servicename is the name of service, username is the username of a user you want to grant access, |
| and access is the level of access you want to grant a user. For instance, to grant full control over a |
| spooler service, type the following in the command prompt: |
| For more detailed syntax information, read the Windows 2000 Server Resource Kit documentation. |
| http://www.microsoft.com/windows2000/techinfo/reskit/default.asp |
First Previous Next Last |