====== Start and stop eBiss service with user privileges ======

If users without administrator privileges((The default security descriptor of services under Windows-7 (as well as under Windows-XP, Vista and Windows-8) does not grant users the right to start and stop, this is reserved for LocalSystem and administrators.)) should be allowed to start and stop the eBiss service.
The rights to access Windows services are usually configured by means of security descriptors. There are different ways to configure the security descriptor of a service, one of them is e.g. the command line tool sc.exe:
<code>sc sdset ServiceName SecurityDescriptors</code>
The security descriptor must be specified in a special [[https://docs.microsoft.com/de-de/windows/win32/secauthz/security-descriptor-string-format?redirectedfrom=MSDN|Security Descriptor String Format]]. 
The following command sets the permissions accordingly:
<code>sc sdset eBiss3Service D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;IU)</code>

Checking the SecurityDescriptor is also possible using sc.exe:

<code>sc.exe sdshow eBiss3Service</code>

{{:en:howtos:sc_show.jpg?nolink|}}

{{:images:sign_warning.png?nolink|}}**Hint:** The service name for eBiss is usually **eBiss3Service**.