It's there a way i can give the rights to a specific user, for restart a specific service on windows server 2008 ?
You can use the sc command to set permissions on a specific service.
The format is a little difficult to understand, but first you will need to find the user or group's SID to use the command (something like "S-1-5-21-....").
sc myserver sdset spooler D:(A;;RPWP;;;place-sid-here)
A couple notes on that command:
- RP Allows service start
- WP Allows service stop
Replace myserver with your server's name and spooler with the service you want to edit.
More information is available at the following locations:
Waiting for my VMs to spin up, but it looks like this should work (from reading this)
- Open group policy to Computer Configuration\Policies\Windows Settings\Security Settings\System Services
- Edit the service in question, enable "define policy setting" and then "edit security"
- Add the user and give them "read" and "start, stop, and pause" rights
I'll swing by after I've tried this out, but good question! I had no idea this had been added.
This might also work: Remotely restarting a service for a non-administrator user