GUI available for editing service ACL?

Hi,

currently I am searching a program with GUI for editing the ACL descriptors
of windows services. This is for example pretty handy if you want to assign
a user or a group the permission to start a certain service.
Usually only administrators can start or stop services but working all the
time as administrator isn't the best from the security point of view - as
we all know.

I already found a cryptic command line utility called "scacl" which can do
what I want. But it is very difficult to use - if you don't know exactly
what to do you can easily kill a service ACL completly...
http://www.losoft.de/ls_scacl.html

Does anybody know a bit user friendly GUI which allows to edit the service
ACLs like the file/folder ACL dialog?

Robert

you can use Process Explorer





"Robert Kochem" wrote:

> Hi,
>
> currently I am searching a program with GUI for editing the ACL descriptors
> of windows services. This is for example pretty handy if you want to assign
> a user or a group the permission to start a certain service.
> Usually only administrators can start or stop services but working all the
> time as administrator isn't the best from the security point of view - as
> we all know.
>
> I already found a cryptic command line utility called "scacl" which can do
> what I want. But it is very difficult to use - if you don't know exactly
> what to do you can easily kill a service ACL completly...
> http://www.losoft.de/ls_scacl.html
>
> Does anybody know a bit user friendly GUI which allows to edit the service
> ACLs like the file/folder ACL dialog?
>
> Robert
>

盆盆 schrieb:

> you can use Process Explorer

Are you sure? I searched the whole Process Explorer GUI but I do not found
anything for even displaying the service startup permissions. I only found
how to display the permissions of the running service (executables).

Could you please be more specific?

Robert