Windows/cmd

windows commandline stuff

subinacl
subinacl.exe is in a windows resource kit

allow a restricted (non-admin) user to control a specific service
for example the OpenVPN service

SUBINACL /SERVICE \\MachineName\ServiceName /GRANT=[DomainName\]UserName[=Access]

 C:\Programme\Windows Resource Kits\Tools\subinacl.exe

subinacl /SERVICE "OpenVPNService" /GRANT=fnord=TO

OpenVPNService : new ace for theta\fnord OpenVPNService : 1 change(s)

Elapsed Time: 00 00:00:00 Done:       1, Modified        1, Failed        0, Syntax errors        0 Last Done : OpenVPNService 

fnord is the username, TO means the ability to start and stop the service, there are other abilities too:

F : Full Control R : Generic Read W : Generic Write X : Generic eXecute L : Read controL Q : Query Service Configuration S : Query Service Status E : Enumerate Dependent Services C : Service Change Configuration T : Start Service O : Stop Service P : Pause/Continue Service I : Interrogate Service U : Service User-Defined Control Commands

wmic
see WmicAliase