Allow non-Admin users to control specific services

By default only Administrators can control services on a Windows 2000, XP, or 2003 system. It some cases it may be necessary to allow users control over a specific service without granting them admin rights.

The subinacl.exe utility, found in the Windows 2003 Resource Kit, or available for download on its own here, can be used to give regular users control over a specific service. The basic syntax is as follows:

subinacl /service servicename /grant=username=permission

• servicename should be the service short name. It may include the name of a remote computer (e.g. \\SERVER\Messenger) and should be enclosed in quotes if the service name has spaces in it (e.g. "\\SERVER\My Service Name").
• username can be a local name or a username in the format domain\username.
• permission is the permission to be granted. If this is excluded, F (Full Control) is assumed. Specific permissions and more information on subinacl can be found in Microsoft Support article 288129.

subinacl must be run as a user who has sufficient rights to grant permission to another user (typically and administrator).

Warning: By visiting this site and/or by using any information contained herein, you agree to the Techbytes.ca terms of use.

Add a comment about this TechByte

If you wish to add a comment regarding this TechByte, please use the form below. Please note that by submitting comments using this form you are allowing all of the information submitted to be visible on this website. Any comments submitted using this form will only be shown on the website if they are approved by the administrators of this site. IF APPROVED, COMMENTS MAY TAKE SEVERAL DAYS TO BE POSTED.

Other TechBytes:

• No Outlook folders available in Blackberry PIM synchronization
• Thinstation screen resolution is wrong
• Increase available drive space with free space on another system