Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have following scenario:

  • I'm local admin on my computer with Windows 7 Enterprise and UAC enabled
  • Computer is not in domain and is not under group policy
  • I run some program without running it as administrator
  • This program sometimes needs to control locally installed windows service (with Manual start options)
  • Without running initial program as administrator or without disabling UAC controlling windows service fails.

How can I grant permissions to my account to control this particular service without running with elevated privileges or disabling UAC?

share|improve this question
    
The qeuestion is how are you running it (running it from a batch file using a scheduled task?)? and when (startup shutdown)? –  KCotreau Jul 27 '11 at 12:30

1 Answer 1

up vote 2 down vote accepted

Services, just like about every Windows object, have an ACL associated with it, which can be modified to give you access.

As far as I know, there is no official UI for managing service ACLs, so you're left with two options:

  1. Download Process Explorer, start your service (ProcExp only shows running services), double-click on the associated process in ProcExp, click the "Services" tab, and manage permissions from there.

  2. sc showsd, learn the ACE syntax and access rights, edit the security descriptor, pass it back to sc setsd.

share|improve this answer
    
Process explorer worked. Thanks. –  Ladislav Mrnka Jul 27 '11 at 20:49

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.