Group Policy - Start/stop specified service....

[prash_mate]

Can anyone tell me how to allow users group to start and stop some non-standard services via group policy? It seems that you can use the Computer Configuration >> Windows Settings >> Security Settings >> Systme Services for services that are installed on the server you edit the policy from. But I want to know how can I permission a non standard service like MSSQLSERVER, so that only certain groups can start/stop/query without creating the policy on the server that has the service installed? Thanks.

[Gonzo]

I dont know why you are not ready to create a policy from the computer on which the service is present, because this is the most straight approach to accomplish the goal. Otherwise you will need to manually edit GptTmpl.inf which is in Service General Setting section, in the Machine\Microsoft\Windows NT\SecEdit subfolder of the policy folder under SYSVOL.