SetServiceSecurity

Rating: No reviews yet
Downloads: 187
Change Set: 7604
Released: Dec 15, 2011
Updated: Dec 18, 2011 by GregAskew
Dev status: Beta Help Icon

Recommended Download

Application SetServiceSecurity.exe
application, 8K, uploaded Dec 18, 2011 - 161 downloads

Other Available Downloads

Application SetServiceSecurity.src.zip
application, 11K, uploaded Dec 18, 2011 - 26 downloads

Release Notes

SetServiceSecurity is a command line utility that provides a way to set the ServiceRights of a Windows service.
Requires .NET 2.0 or higher.
Does not currently provide for audit rules or deny rules, although that could be easily "contributed".

Usage:

SetServiceSecurity -l
Enumerates all running services.
SetServiceSecurity -l serviceShortName
Display discretionary ACEs for service
SetServiceSecurity -a serviceShortName machineOrDomain\SecurityPrincipal ServiceRight;ServiceRight
Adds an ACE for a security principal for the list of service rights.
SetServiceSecurity -d serviceShortName machineOrDomain\SecurityPrincipal
Removes an ACE for a security principal
SetServiceSecurity -c serviceShortName machineOrDomain\SecurityPrincipal
Check if a service has an ACE for a security principal.

Notes:

Must be run from an elevated command prompt on Vista/Windows7/2008/2008R2.
Will not add an ACE if an ACE for the security principal already exists. Remove the existing ACE first.
Will not remove ACE for LocalSystem or Administrators.
Specify list of ServiceRights separated by a semicolon. Available ServiceRights:

QueryConfiguration
ChangeConfiguration
QueryStatus
EnumerateDependents
Start
Stop
PauseOrContinue
Interrogate
SendUserDefinedControl
Delete
ReadPermission
Write
Read
Execute
ChangePermission
TakeOwnership
FullControl
Example:

SetServiceSecurity.exe -a spooler domain\username Start;Stop;PauseOrContinue
SetServiceSecurity.exe -l spooler
SetServiceSecurity.exe -d spooler domain\username

Reviews for this release

No reviews yet for this release.