Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I give an account permission to start or stop a particular Windows Service using SC.exe?

What I'm trying to do is from one machine A call these operations from another machine B:

net.exe use \\B /delete
net.exe use \\B /user:B\<username> <password>
sc.exe \\B stop <service name>

The issue is that the first two operations pass but the third one fails.

share|improve this question
Duplicate of the vaguely titled question – Nathan Hartley Aug 16 '12 at 16:47
I've made the other post's title more descriptive, but I prefer the title of this post. – Nathan Hartley Aug 16 '12 at 16:54
More duplicate/similar posts: , , And I see each of those have more linked (similar) questions. – Nathan Hartley Aug 16 '12 at 16:57

You have to give your user the permission to stop the service either explicitly or via the membership of a sufficiently privileged group. This can be done by first changing a security template using the Security Templates MMC snapin and subsequently applying it to your system either locally or via group policy. This works at least on from Windows XP.

share|improve this answer
The pre-built Security Template MMC is secpol.msc. – Nathan Hartley Aug 16 '12 at 16:44

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.