Sometimes, you may give full permission for users (server operators etc.) to a service to manage server. The User may have problem with this service's executable file when user need to run this file at command prompt.
This problem occured when server operators run awservices.exe at command prompt to interpret functioning of Unicenter TND agent Tecnology.
To resolve this case, you must give full control permission on service dacl (discretionary access control lists). To do this beforo read dacl of service with;
"Sc sdshow awservices" command. The command genaretes results that like;
(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;PU)(A;;CCDCLCSWLOCRRC;;;LS)
Copy this results and add server operators group or the group which you want to add with neccesary permission.
To set new dacl to service, use following comand;
sc sdset awservices D:
SC
Communicates with the Service Controller and installed services. SC.exe retrieves and sets control information about services. You can use SC.exe for testing and debugging service programs. Service properties stored in the registry can be set to control how service applications are started at boot time and run as background processes. More information about SC click here
