![]() |
Version 7.0 ![]() July 29 2025 1.1 MB EXE |
|
Easily allow (or deny) a user the ability to start, stop, pause or modify any Windows Service with just a few clicks of your mouse!Service Security Editor will help you to configure who can access your important Windows Services. It's an easy-to-use GUI alternative to Microsoft's powerful SC and SubInACL.exe command line programs. However, as with any other administrative tool, please use it with caution! When you start Service Security Editor, it shows the list of the services running on your machine. From the dropdown, choose the service that you'd like to work with. For example, we've selected the Print Spooler service in this screenshot: After choosing your service from the list, click the Open button to pop up the service's standard Windows Service Security Settings window: From there, select a user in the top portion and check the boxes lower down to grant or deny him whatever capabilities you see fit. Click the Add button to bring in an account not yet on the list. And of course, click the OK or Apply buttons to record your changes. Granting a Non-Admin User Start & Stop Rights to a ServiceFor example, suppose you have a non-administrative user called Mike Jones who needs to restart the Print Spooler service when it acts up. Because he doesn't have the necessary rights, the Stop button is disabled when he opens the service from the Services Control Panel application: To grant Mike the ability to start and stop the Print Spooler service:
Wasn't that easy? Allowing a Non-Admin to Control a Service RemotelyUpdating the service's permissions to empower a user is all well and good, but sometimes that isn't enough. Specifically, if the user is not an administrator, any attempt to control the service may fail — even though you granted them full rights to do so! It turns out that in Windows 10 (and Server 2016), Microsoft installed security barriers to block remote control of services. As a result, only users who are local administrators on a remote computer can start or stop services on that computer. This blog article discusses the situation. Fortunately, Service Security Editor makes it easy for you to bypass Microsoft's additional security constraints. With a couple of clicks, you can easily add any Windows Service to the remote access check exemption list, which should allow your regular users to start or stop that service remotely. For example, to ensure that Mike can start the Print Spooler service remotely:
And with that change in place, Mike will be able to start the Print Spooler service remotely — at least until Microsoft erects another security barrier! |
Service Security EditorDownload
|