SDDL

---

Start Stop service rights to non administrators

This entry was posted in Windows OS and tagged administrator least privilege SDDL security service on 1st June 2018 by Dimitri

LIke any other object in the Windows world, services are objects, you can therefore give users rights on them. Let’s see for example how to allow start stop service rights to non-administrators. In order to change the permissions to a service, you’ll need an account who has rights to change […]

---

Event Log Rights for Non-Administrators 11

This entry was posted in Windows OS and tagged event log event tracing SDDL on 21st January 2016 by Dimitri

Granting event log rights to non-administrators wsa challenging in Windows 2003, becomes easier in Windows 2008 (R2). However fine-tuned access still requires playing with Security Descriptors reading and writing. Event Log Rights Case #1: Read Access only For Windows 2008, If you just want to grant regular read access, the […]

---

---