Forum Discussion

Barb's avatar
Barb
Icon for Advisor rankAdvisor
5 months ago
Solved

Least Privilege's script to set permissions on Services for Non Admin account.

With the new security push for us to use non admin accounts. If anyone would like I to have a script that can run on Domain and one for Workgroup Servers. That iterates though all services and applie...
  • Barb's avatar
    Barb
    5 months ago

    Hi Suzanne its a one time process. Anytime you provision a new server thou it will need to be run as part of your provision process.

SuzanneShaw's avatar
SuzanneShaw
Icon for Community Manager rankCommunity Manager
5 months ago

Barb, this is super helpful insight. How often do you find you need to do this?   Like is this a one-time process, or is it something you have to repeat?

  • Cole_McDonald's avatar
    Cole_McDonald
    Icon for Professor rankProfessor
    3 months ago

    Based on how the script from LM works... any new software that runs from a service that needs to be monitored will need the SDDL applied to it as well... so we have a version of our final script in our RMM that runs and searches for Services that don't match the SDDL, and adding it for them.