I'm trying to give a domain user rights to start and stop services on Windows 2008 server but I don't want to give the user local admin rights. I've used "subinacl" tool but no success. I'm using "sc" command to execute the stop, start, and queu command from a remote computer and I can do this if I give the user local admin rights on the server where the service resides. No other built in group works other than the local admin group. I've done this in Windows 2003 with no problem but I can't get it to work with Windows 2008.

Hi,This is Exchange Server - Admin forum, suggest you to use Windows 2008 forum to get faster responses.Windows 2008 forum:http://social.technet.microsoft.com/Forums/en-US/category/windowsserver/Amit Tank | MVP - Exchange | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com

My bad, it was a long day. I clicked the wrong forum. Sorry about that...

No worries :)Amit Tank | MVP - Exchange | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com

Microsoft's Security Configuration Wizard can be used on Windows 2003 to give permissions to a service.Andrew Sword, MVP