Enumeration of services in services.msc console issue

Question

Hi, I was given a task to allow non-admin users to restart MSSQLSERVER service on
Windows Server 2003 R2 computer which was old core banking database server now used only for finding some archives in SQL databases. I have done the following steps:
Granting permission to start/stop/pause MSSQLSERVER service and dependent SQLSERVERAGENT service to these users using GPO created from old core banking database server on Domain Controller and linked to an OU containing that server 
Creating custom .msc console with services snap-in targeting old core banking database server
Deploying that .msc console to these user's desktop using Group Policy Preferences
Granting authenticated users right to enumerate services on server remotely using:
SC sdset scmanager D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPRC;;;IU)(A;;CCLCRPRC;;;SU) (A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)
When I tested this I noticed that when non-admin user double clicked .msc shorcut from their desktop, services on old core banking database server are listed but
these two SQL services are not there (by the way I noticed that some other system services are not listed, i.e. print spooler). If user logs on locally on server and opens services.mcs console all services are there and user restarts MSSQLSERVER
service and thus SQLSERVERAGENT service successfully.
What is going on here? I do not want users to log on to server using RDP or interactively since only they need is to restart SQL services.
Thanks in advance!
PS: I checked the number of listed services using PowerShell, non-admin user lists only 46 and domain admin user lists 109 services. This is weird! ((Get-Service -ComputerName database_server).Count) 

Answer 1

Hi,
Based on your description, it seems that standard domain users don’t have enough permissions to open these services. Here, I want to confirm how we granted permissions for
users to open these services. Besides, if we try opening these services as standard users, will we get any error message?
Regarding how to grant users rights to manage services, the following article can be referred to as reference.
How to Grant Users Rights to Manage Services (Start, Stop, Etc.)
http://social.technet.microsoft.com/wiki/contents/articles/5752.how-to-grant-users-rights-to-manage-services-start-stop-etc.aspx
Hope it helps.
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen