Forum Discussion

GinaKomoroske's avatar
GinaKomoroske
Copper Contributor
Mar 26, 2025

best /easiest way to grant non-admins permissions to manage windows services remotely

As a part of an automation effort, we want to grant non-admin users the ability to remotely manage certain app services on domain member servers (Windows Server 2022 OS, stop/start/status).  I've played around with JEA but was only able to get the get-service command to work, not the stop or start-service.  I also played around with group policy, granting FC for the user on the app service, but that didn't seem to do anything at all.  I ended up running sc sdset commands on a service, which seemed to work, but that also seems very clunky and not at all easily streamlined, especially if we have several servers to manage that way.  Ideally, if the group policy setting would have worked, that'd be a great solution, but I don't know what I'm missing.

Has anyone here been able to easily manage granting permissions for non-admin users to manage services or even IIS app pools on remote Windows servers?  Most of the time the code used has been powershell, but if there's batch commands that work better, we could use those too.  I just don't want to grant local admin permissions just to manage services.

Any advice/guidance is greatly appreciated.

Gina

 

No RepliesBe the first to reply

Resources