I'm relatively new to Windows Server 2003 (background in Unix) and
I'm looking to automate a very tedious task which we have to perform
often (on each machine we ship out the door). I've got 9 different
services which I have to set the "Domain Controller Security Settings"
on. Each of those services needs to have 5 different groups added to
the "Security" settings and configured so that some of the groups can
only start the service, some can only stop the service, etc. How can
I use the command line or write a batch file or perl script (or
whatever) to automatically configure these settings? Can anyone point
me in the direction of a web page or book that would me in my
quest?

Thanks,

Greg Buchholz

P.S. In case I haven't made myself entirely clear, here's the steps we
currently take to configure the services:

Click on Start, then "Administrative Tools", then "Domain Controller
Security Policy". Then select "System Services", and right click on a
desired service, then "Properties". Check the "Define this policy
setting" box, select the "Automatic" radio pushbutton, and click "Edit
Security". Then we "Add" the 5 necessary user groups, click on the
"Advanced" button, select a group, then "Edit", and finally check the
correct permissions boxes.