Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I had a task to allow some non-admin user to restart a service. I've used the SDDL way in order to allow him the restart, the problem is, that i mistakenly added only the new SDDL without the whole permissions it had and now i've lost all control on the service apart from the non-admin user which is able to restart it. When i open the services.msc window i cannot find the service but i know it's running as the application which uses this service keeps working as it should, but it seems like the service is hidden. Is there any way to solve this issue? Thanks in advance Itai

share|improve this question
if you look at the current sddl who has ownership? – tony roth Jul 18 '12 at 14:53
only the non-admin user which has RPWP (stop/start) – Itai Ganot Jul 19 '12 at 6:04
as admin you can take ownership then reset the permissions. – tony roth Jul 21 '12 at 20:14
up vote 1 down vote accepted

Tony - after overriding the acl's of the service no user had any admin access to the service, the only access i had was with the non-admin user and he could only stop/start the service.

Solution: I deleted the service settings from the registry and then i was able to re-install the service, now it works as it should.

share|improve this answer
darn that was to easy... – tony roth Jul 23 '12 at 14:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.