There is a windows service that gets reinstalled sometimes.
I need a user to be able to start/stop/restart this service. This user is not an administrator and shouldn't be.
If I use
setacl.exe than it works, or even I can use
sc sdset, but after the service gets reinstalled setacl needs to be called again, but the process that reinstalls the service has no rights to run setacl.
Is there a way to grant a specific user the right to restart a service with a specific name, or even all services, that persists through a service reinstall?
If I'm able to give a user some general permissions to "manage services" that would also be fine, but I'm unable to pinpoint the exact rights needed for this (if I add the user to the admin group, he can start/stop services, but can -obviously- do a lot more than that).