SvcUtil

Summary

Command line tool to view basic service information as well as stop/start/pause/continue service.

Warranty

See warranty.

PlatForms

Current Version

Version 2.04.00 - June 12, 2005

Modification(s) from previous version

Security Requirements

None.

Language

C++. Compiled with Borland Builder 6.0

Source Code Availability

None

Story

This is is a cross between SC and SCLIST in that it will enumerate all services or it will deal with an individual service. The VIEWX mode of enumerating all services will show you which accounts everything runs under so if you need to quickly check services on a server to determine everything runs under localsystem this app does it quickly and painlessly. Additionally, it only asks for the permissions required to do what it is trying to do. Most of the service tools ask for full control when interfacing with the SCM so normal users aren't able to do things. With this, you don't require any special permissions to read all of the info unless someone has modified the ACL's on a service. And speaking of that, if someone has say, changed the spooler service with SUBINACL, to allow normal users to stop/start the service this code will let them whereas the NT4 versions of the service tools will not because they are not ACL aware though they are ACL bound.

To add to the story, Microsoft made an update to Windows Server 2003 SP1 that made it so you could change the SCM ACL. This was previously not something that could be done. When they did this, they locked down who could do remote enumeration of the Services. Because most everyone opened the SCM with GENERIC_READ, this means most tools (including Microsoft's own tools pre-K3SP1) used to access the SCM broke unless the user was an administrator on the server. Even if the specific services were delegated to the some non-admin user, unless the SCM was opened properly, they wouldn't be able to control those services remotely which resulted in admins giving out admin rights again or giving interactive logon rights to servers and having the non-admins logging directly into the servers to control their one service. I understand why MS went this direction, but unfortunately it didn't seem to be fully thought out as it probably should have been more widely announced so people understood what was going on, this has broken quite a few people.  

Download

You do not have to supply the email address. I would like you to fill that in though so that I have an idea on how popular a tool really is. If I see 1000 downloads with 900 different email addresses I know it is more widespread than one that has 1000 downloads and 200 different email addresses because the same person needed to keep downloading it for some reason.

Email Address: Optional
 
Sponsored Link:

Version History


As seen in


Usage

    Download and type SvcUtil /?

See current usage screens