Managing Service Permissions

To view or manipulate services, you must have appropriate access to the SCM. Permissions to the SCM cannot be altered, although permissions over specific services can be modified. Tables 9-1 and 9-2 list the default permissions for the SCM in Windows 2000, Windows Server 2003, and Windows XP, respectively. These services are not exposed in a human-readable format in the registry.

Table 9-1. SCM Permissions in Windows 2000
GroupPermissions Granted
Everyone

  • Connect to the SCM

  • Enumerate services

  • Query the status of services

  • Read the permissions on services

Administrators Local System

  • Full Control

Table 9-2. SCM Permissions in Windows Server 2003 and Windows XP
GroupPermissions Granted
Authenticated Users remotely logged on to ...

Get Microsoft® Windows® Security Resource Kit, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial