I'm relatively new to Windows Server 2003 (background in Unix) and
I'm looking to automate a very tedious task which we have to perform
often (on each machine we ship out the door). I've got 9 different
services which I have to set the "Domain Controller Security Settings"
on. Each of those services needs to have 5 different groups added to
the "Security" settings and configured so that some of the groups can
only start the service, some can only stop the service, etc. How can
I use the command line or write a batch file or perl script (or
whatever) to automatically configure these settings? Can anyone point
me in the direction of a web page or book that would me in my
quest?

Thanks,

Greg Buchholz

P.S. In case I haven't made myself entirely clear, here's the steps we
currently take to configure the services:

Click on Start, then "Administrative Tools", then "Domain Controller
Security Policy". Then select "System Services", and right click on a
desired service, then "Properties". Check the "Define this policy
setting" box, select the "Automatic" radio pushbutton, and click "Edit
Security". Then we "Add" the 5 necessary user groups, click on the
"Advanced" button, select a group, then "Edit", and finally check the
correct permissions boxes.

On Wed, 29 Aug 2007 12:52:18 -0700, Greg Buchholz
<sleepingsquirrel@yahoo.com> wrote:

> I'm relatively new to Windows Server 2003 (background in Unix) and
>I'm looking to automate a very tedious task which we have to perform
>often (on each machine we ship out the door). I've got 9 different
>services which I have to set the "Domain Controller Security Settings"
>on. Each of those services needs to have 5 different groups added to
>the "Security" settings and configured so that some of the groups can
>only start the service, some can only stop the service, etc. How can
>I use the command line or write a batch file or perl script (or
>whatever) to automatically configure these settings? Can anyone point
>me in the direction of a web page or book that would me in my
>quest?
>
>Thanks,
>
>Greg Buchholz
>
>P.S. In case I haven't made myself entirely clear, here's the steps we
>currently take to configure the services:
>
>Click on Start, then "Administrative Tools", then "Domain Controller
>Security Policy". Then select "System Services", and right click on a
>desired service, then "Properties". Check the "Define this policy
>setting" box, select the "Automatic" radio pushbutton, and click "Edit
>Security". Then we "Add" the 5 necessary user groups, click on the
>"Advanced" button, select a group, then "Edit", and finally check the
>correct permissions boxes.

Hi Greg,

If you don't get an answer here suggest you try re-posting in
microsoft.public.windows.powershell.

Cheers,
Chris