By default, when you load up the services list in Group Policy editor, only the services running on that particular server are shown. If you want to control services running on other machines, you need to add them. Any service at all can be added, including ones from third party vendors.
Step 1: Export Settings
- Log on to the machine that runs the service you require
- Run secpol.msc
- Create a new template
- Within that template, navigate to "System Services" and all the services currently on that machine will be listed.
- Edit the service(s) that you require (note: ONLY edit there services)
- Save the template
- Copy that file to the machine where you run the GP Editor (usually a DC)
Step 2: Import Settings
- Load Group Policy Editor, and edit the policy that controls services you require
- Navigate to the ‘Security’ node, right-click, choose import and select the file exported above
- The service(s) should now appear in the policy, and can be modified just like any other service
No comments:
Post a Comment