Give helpdesk ability to restart ALL SERVICES without making them local or domain administrators

I have a windows server 2012 environment using Active directory.  I need to give my helpdesk group the ability to stop, start or restart all services on the machines located within an OU, but I do not want to make them local admins because I don't want
them to be able to install software, create users etc. 
I have found articles that allow you to grant this right on a PER SERVICE basis, but I am looking for a solution that allows them to restart any service...not just named services.  
Any help would be greatly appreciated!
-Brian

> I have found articles that allow you to grant this right on a PER
> SERVICE basis, but I am looking for a solution that allows them to
> restart any service...not just named services.
http://waynes-world-it.blogspot.de/2009/10/service-control-manager-security-for.html
http://serverfault.com/questions/37721/how-do-i-grant-users-the-ability-to-install-windows-services
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Similar Messages

  • Is it mandatory to Restart all services after making Business Rule change?

    Hi,
    I know it may be a easy one but wanted to know is it mandatory to restart all the Planning and Essbase services if we make any changes in the Business rule
    in 9.3.1
    -KP

    No you shouldn't have to restart after rule change.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • I recently changed computers and lost all my playlists from my itunes on my computer, i have them still on my phone. Is there a way i can get them back without making them all again?!

    i recently changed computers and lost all my playlists from my itunes on my computer, i have them still on my phone. Is there a way i can get them back without making them all again?!

    If the books were purchased at the iBookStore, you will be able to redownload, like the apps. Some other sellers, like O'Reilly, also allow multiple downloads.
    If you have (or can install) iTunes on a computer (Mac preferable, not mandatory) and run it then plug the device in, does it show up? If the computer can detect it, you can and should do a complete backup onto local storage immediately. That can then be used to reconstruct the content of the device on a new or repaired replacement. If you enable encryption, even the passwords will get saved.

  • Feature request: please give the ability to close all background apps at once!?

    Hello. Please oh please give us the ability to close all open/running apps with one click or swipe. I, like many users, like to close running apps (much like on my computer) to keep my ipad/iPhone running fast. I know you guys say that background apps are put on pause and don't slow things down but that is simply not the case in real world usage. All the time my iPhone or iPad becomes sluggish and if I swipe 30 times to close all the apps the sluggishness goes away. I like the simple and easy to use ios, but a little more control for the user would be very beneficial. This, I would guess, is one of the main reasons one would get an android device instead, because they require for fine tune control. Giving us this feature, amoung a few others, would be a win win. The end user get more what they need, and apple steals away (or keeps) more loyal apple buyers.

    Send your suggestion to Apple at http://www.apple.com/feedback/ipad.html
    This is a user to user technical help forum. You aren't talking to Apple here.

  • [solved] How to restart all services with systemd?

    I had the habit of restarting all daemons after an upgrade so to make sure the newest libraries, configuration files etc were loaded. I did that with a shell script that restarted the daemons in order which they were listed in rc.conf. With systemd I could do something similar by first getting a list of running services and ordering a 'systemcrl restart  <servicename>' for each. But since systemd keeps track of dependencies I wonder if that would be the way to do it. Also I would need to filter out 'one shot' type services that are only needed on bootup.
    <edit>restart instead of reload</edit>
    <edit>solved it with a little script</edit>
    Last edited by rwd (2012-11-27 21:02:02)

    I think that's what systemctl snapshot does.
    snapshot [NAME]
               Create a snapshot. If a snapshot name is specified, the new snapshot will be named after it. If none is specified an automatic snapshot name is generated. In either case, the snapshot name used is printed to STDOUT, unless --quiet is specified.
               A snapshot refers to a saved state of the systemd manager. It is implemented itself as a unit that is generated dynamically with this command and has dependencies on all units active at the time. At a later time the user may return to this state by using the isolate command on the snapshot unit.
               Snapshots are only useful for saving and restoring which units are running or are stopped, they do not save/restore any other state. Snapshots are dynamic and lost on reboot.
    Then, isolate emergency.target or rescue target and switch to the snapshot.

  • How do I push an app to my employees iphones without making them create an itunes account?

    My business has over 40 employees, all of whom we provide with Iphones to use for business use.  I need for them all to download an app to the phones, without having them create an Itunes account. I don't have physical access to the phones as this is a remote business and the employees and phones are scattered across the state.  Is there a way to purchase 40 apps and create a link to send to my employees by email? If not, is there another way to accomplish this goal?
    Thanks,
    Clay

    You can't without utilizing an MDM and have all their phones enrolled into it.

  • Restart dimension services without disrupting live system

    Hi,
    11.1.2.1
    I am currently getting the messages - "Could not connect to Dimension Server. Please make sure that the required services are started." / "An error occurred processing the result from the server." / "Required application module awb.dimeditor is not configured." / "Required application module awb.appmanager is not configured." - but currently have a number of users inputting into Planning to make a tight deadline....
    Is there anyway I can safetly restart the necessary services for dimension library and connected functionality (application manager, calculation manager) to work without disrupting end user input?
    i.e. Which services do I need to restart to get Dimension Manager back and edit business rules - and can I do so without disruption of normal service for everyone else
    thanks,
    Robert.

    The error relates to EPMA so you should be able to restart the EPMA services and not effect the planning application.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Configuration (Instance) alias problems - restart all services or just data engines?

    I have 2005, 2008 (not R2) and 2012 instances installed on a workstation.  I disabled 2005 (turned all the services off) and only need to have 2008 and 2012 instances running.
    When adding new aliases or changing the existing aliases for 2008 and 2012, what services do you need to restart.
    The alias I setup for 2012 works as expected but the other for 2008 simply brings up the 2012 instance when I make a connection in the 2012 SSMS.

    I think i figured it out.  I was not confident that my 2008 instance was listening on the port i THOUGHT it was.
    So I checked
    USE master
    GO
    xp_readerrorlog 0, 1, N'Server is listening on' 
    GO
    Sure enough...it was NOT 1433, so I set my alias to use the port my 2008 instance was listening on and bamo...I can connect with that alias.

  • Lion restarting all applications without warning?

    Hi there,
    I'm experiencing some extrange behaviour in my Mac Pro (MacPro1,1) with Lion 10.7.2.
    All of a sudden, all the active apps (and a couple other more) get restarted, without fully restarting. No warning at all.
    I have disabled the 'Restart automatically if the computer freezes' option, but it is not like the computer freezes.
    Has anybody experienced anything similar? Any ideas?
    Roberto

    I'm not sure I understand completely. Generally, to quit an application, you go to that application's name in the menu bar at the top of your screen, click on it, then scroll down to Quit (Application Name). Also, the universal Mac keyboard command to quit an application is Command + Q.
    Now if you're talking about applications that are not responding, you can go down to your Dock, find that application's icon, right click on it, and then select Force Quit. Or, if you prefer, you can hold down Command + Option and then click ESC. This will bring up a Force Quit Applications window.
    And if you're referring to certain application processes that are running and not responding, or running and you want to restart those processes, you'll have to launch the Activity Monitor. It's an application that resides in your Utilities folder. You can view all running processes with this application and force them to quit. However, if you don't know what you are doing, you can force quit certain processes which will automatically trigger a Logout or Restart, which is contrary to what you want to do. You can also, if you're not cautions, quit certain processes that will render your Finder inoperable until a Logout or Restart.
    Hope this helps.

  • How to restart network services without rebooting the machine

    Hi ,
    i am new to solaris
    pls guide for this

    Hi ,
    i am new to solaris
    pls guide for this

  • Single Go button for all prompts - without making changes to system files

    Hi All,
    I went thru several threads and blogs which suggest to do certain changes in the .js files to get a single go button for a group of prompts (saved as individual objects)
    Is it possible to have single go button in 11g for prompts which are saved separately without changing the system files?
    Many Thanks,
    RS

    Hi,
    I dont think so. But in 11.1.6 version there is a feasibility to avoid apply and reset buttons. so that will make to appear all the prompts together.
    And you can try to built a common prompt filter with all the columns, but it will be bad and cause lots of problems.
    Hope this helped/ answered.
    Regards
    MuRam

  • $25 Reward - Calling a CFC via Remote Object or Web Service without making the result public

    I am just getting into Flex 2, so please forgive me for my
    newbe vocab.
    Here is how my applications have worked in the past, i.e.
    ColdFusion:
    <cfscript>
    //Create an instance of component
    order = CreateObject( 'component', 'PEK.Catalog.Order' );
    //Call methd
    theOrder = order.getOrder(1234);
    </cfscript>
    Display the order via HTML and CFML.
    getOrder() returns a query and 1234 is a sample orderID. The
    most important part of the solution I am looking for is that the it
    must not expose my getOrder() as a public web service. I am able to
    run the application with WS by making the mothod URL visible and
    remote, but this is no way near the security I would like to have.
    Here is my folder structure where components folder has been maped
    to CF.
    Application
    |__extentions
    | ... |__components
    | ... ... |__PEK
    |__wwwroot
    I guest there should be a way to call CFC with the thing
    remote object that I have no idea how to set up. So please what
    would be a solution to my security issues.
    Thank you in advance!

    Click
    Here for Link to Article
    I guess this article answers part of the question. It is very
    important to note that if the CFC is sitting on the same server as
    the CFC the component methods could be public and not remote, thus
    making it alot more secure.

  • Renaming all computers and joining them to new domain

    Hi guys, 
    I'm really hoping someone can help me out. I'm an IT Admin with no actual training (please don't ask lol) so I'm not very knowledgeable and everything I've learned has been by reading forums and trial and error.
    What I need to do is: rename all of the computers on our domain (about 160 of them) to a simple naming system (we'll say comp1, comp2, etc), join them onto a new domain and reconnect the appropriate printers to each. Also, for some reason it is required
    I manually enter the DNS server IP in order for it to see the new domain and be able to connect. 
    In the past, I've learned that you have to reboot machines between both renames and domain changes so I understand that. What I'm trying to figure out is if I can do all of this by running some sort of "script" or by a group policy or something
    instead of doing everything manually (which will require an entire weekend since I have 8 locations to do this for). The machines are WinXP and Win7 and our AD server is 2008 R2.
    Also, how does deleting DNS/DHCP records affect anything if I were to delete them during this process? Am I supposed to for a big rename project like this? I only ask because when I've accidentally named a computer to a name that was already on the network,
    that caused an issue with DHCP. If you do have time to help me out, I appreciate it but I'll have to request you speak in somewhat laymen's terms. I apologize in advance if I frustrate anyone :) 

    You can script that using netdom.exe: http://support.microsoft.com/kb/298593/en-us
    For the DNS records, their updates should be done automatically if you have Dynamic Updates enabled on the DNS level. As for stale DNS records, they will be removed automatically if aging and scavenging is already configured.
    How to secure DNS updates on Microsoft DNS servers: http://social.technet.microsoft.com/wiki/contents/articles/21984.how-to-secure-dns-updates-on-microsoft-dns-servers.aspx
    How DNS aging and scavenging works: http://social.technet.microsoft.com/wiki/contents/articles/21724.how-dns-aging-and-scavenging-works.aspx
    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Get Active Directory User Last Logon
    Create an Active Directory test domain similar to the production one
    Management of test accounts in an Active Directory production domain - Part I
    Management of test accounts in an Active Directory production domain - Part II
    Management of test accounts in an Active Directory production domain - Part III
    Reset Active Directory user password

  • Restart Data Services 3.2 fails

    I can not access  trace log, monitor log and error log files. Every time accessing through links I get a time out error. The Server is available and accessible. I just tried to restart the BusinessObjects Data Service - Server through the BO-DS-Servermanager. This has not worked. I can not restart the service "BusinessObjects Data Services".
    This Error occures : Error 1053: The service did not respond to the start or control request in a timely fashion"
    This happened sometime last months. When I restart the server then all is ok again.
    How can I restart the service without reboot?

    Hello,
    1. What is the version of the Microsoft .NET Framework? (Control Panel > Add/Remove Programs).
    2. What is the error message in Event Viewer (Start > Run > eventvwr.msc)?
    3. What user run this service (Start > Run > services.msc > Business Objects Data Services > Properties > Log On tab)?
    4. Is Data Execution Prevention disabled? (My Computer > Properties > Advanced > Performance > Settings > Data Execution Prevention tab)?
    Thank you,
    Viacheslav.

  • Script to find a user and restart two services

    I am looking to make a script to first find a user that is connected to a server (list) the to stop Spooler, then stop cpsvc. Once the services are stopped, the script would then clear out the folder on "C:\Windows\System32\spool\PRINTERS"
    Directory. Once that was done, the script would then start Spooler and cpsvc. At the end it would echo the services were restarted and to try to print now.
    Lee Mossolle

    A user cannot stop and start services and cannot delete files in the system folders.
    There is no need to look for the services in that way  You will have to do this remotely.  Just find the services if they exisit and stop them then remotely delete the contents of the spooler folder.
    PowerShell remoting would be the easies way to do this.
    strComputer = WScript.Arguments(0)
    WScript.Echo "Running Against Remote Computer Named: " & strComputer
    set objWMI = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
    Set colListOfServices = objWMIService.ExecQuery("Select * from Win32_Service Where Name = 'cpsvc' OR Name = 'spooler'")
    for Each objService in colListOfServices
    objService.StopService()
    objService.StartService()
    Next
    Until you understand how yor code will work avoid over coding.  It just adds confusion and errors.   The above is functionally equivalent to what you posted. 
    I suspect there may be a dependency between cpsvc and spooler.  In that casr yo can only kill them in the correct order.  This will require to loops of a more sophisticated scripting approach.
    We can also use the 'Forse' argument and retriev the master service (spooler) and force it to stop all dependent services.  We would then retrive all services and start them. We can also just retrieve the dependency list and use that.
    The code is simple and will allow the dependencies to be added if needed.
    You can also use PowerShell which is much easier.
    Get-Service spooler -computer remotepc | Stop-Service -force
    Get-Service spooler -computer remotepc | Start-Service
    We can wrap this in a function for convenience.
    ¯\_(ツ)_/¯

Maybe you are looking for