Forum Discussion
Service Restart Delegation for AD Group
Need help in delegating a specific service restart right to an AD group. I noticed this could be done through SubInacl.exe or SetACL.exe but these utilities are not available anymore. Any suggest...
You can use group policies for this.
Create a GPO and set the service permissions there:
Computer Configuration -> Policies -> Windows Settings -> Security Settings -> System Services
You can set the startup type and edit the ACL of any service there. Just add your AD Group to the list and allow service start and service stop. Now link the GPO to the workstations and server where you want the permissions to apply.