You can curtail the services used on the network. Such tasks are regulated by group policies. On a local system, in your case, you are however required to define security template. This way you can apply the desired settings on the machine via the Snap-in "Security Configuration and analysis".
First load the Microsoft Management Console. Click on Start->Run, type "mmc" and click on "OK". Open the existing console file or create a new one by clicking on "File->Add/Remove Snap-in". Then in the Standalone tab click on "Add". Now close all the dialog boxes that have been opened. In the console, now open the "Security template" by clicking on the preceding plus sign. Right click on the desired directory and select "New Template". Name the template, give a description for it and click on "OK". Open the "Security template" folder and the file with the new template that you created. Go to the entry "System Service" under "Compatws". Right click on the desired service for e.g. Print Queue" and select properties. Activate the option "Define this policy setting in the template". The security setting are opened. Here click on "Add" in the input field of the following dialog box, type the name of the user who should get the rights to the service. Click on "Verify name" and on successful colclusion, click ok. The new user is now added to the previous dialog box and is marked. Under this, you can define the authorizations for him. A user should at least able to "Read". "Start, pause and suspend" to be able to start and end a service. Activate the necessary control box in the "Allow" column. Finally, confirm the settings with "Apply" and "OK". Again, defina the start moder or the service in the original dialog box. Select Automatic" to do this, and reconfirm with "Apply" And "OK".
First load the Microsoft Management Console. Click on Start->Run, type "mmc" and click on "OK". Open the existing console file or create a new one by clicking on "File->Add/Remove Snap-in". Then in the Standalone tab click on "Add". Now close all the dialog boxes that have been opened. In the console, now open the "Security template" by clicking on the preceding plus sign. Right click on the desired directory and select "New Template". Name the template, give a description for it and click on "OK". Open the "Security template" folder and the file with the new template that you created. Go to the entry "System Service" under "Compatws". Right click on the desired service for e.g. Print Queue" and select properties. Activate the option "Define this policy setting in the template". The security setting are opened. Here click on "Add" in the input field of the following dialog box, type the name of the user who should get the rights to the service. Click on "Verify name" and on successful colclusion, click ok. The new user is now added to the previous dialog box and is marked. Under this, you can define the authorizations for him. A user should at least able to "Read". "Start, pause and suspend" to be able to start and end a service. Activate the necessary control box in the "Allow" column. Finally, confirm the settings with "Apply" and "OK". Again, defina the start moder or the service in the original dialog box. Select Automatic" to do this, and reconfirm with "Apply" And "OK".
Read More...
[Source: Hidden Tricks of Windows - Posted by Kishore Vengala]
No comments:
Post a Comment