How to give WIN10 “Print Spooler” service “Open, Close, Restart” permission to ordinary users

Hello,

You can try to change the permissions of system services using a security template. To create a security template, follow these steps:

1. Select Start, search for mmc and select it.
2. On the File menu, click Add/Remove Snap-in.
3. Select Security Template > Security Configuration and Analysis, select Add, and then select OK.
4. In the console tree, expand Security Template, right-click Security Template, and choose New Template from the shortcut menu. After the template is named, open it and configure the template based on your system permission requirements.
5. In the console tree, right-click Security Configuration and Analysis, and select Open Database.
6. Specify the name and location of the database, and then click Open.
7. In the Import Template dialog box that appears, click the security template you want to import, and then click Open.
8. In the console tree, right-click Security Configuration and Analysis, and then click Analyze Computer Now.
9. In the Perform Analysis dialog box that appears, accept the default path for the log file displayed in the Error log file path box, or specify the desired location, and click OK.

After the analysis is complete, configure service permissions as follows:

1. In the console tree, select System Services.
2. In the right pane, double-click the service whose permissions you want to change.
3. Select the Define this policy in the database check box, and then select Edit Security.
4. To configure permissions for a new user or group, select Add. In the Select Users, Computers, or Groups dialog box, type the name of the user or group for which you want to set permissions, and then select OK.
5. In the Permissions for User or Group list, configure the permissions required by a user or group. When you add a new user or group, the Allow check box next to the Start, stop and pause permissions is selected by default. This setting allows users or groups to start, stop, and pause services.
6. Select OK twice.

To apply the new security Settings to your local computer, right-click Security Configuration and Analysis, and then click Configure Computer Now.

If you have an Active Directory (AD) domain environment configured, you can also change permissions for system services using group policies. For more information, see:
Configure Group Policies to Set Security - Windows Server | Microsoft Learn

Reference:

Grant users rights to manage services - Windows Server | Microsoft Learn

Best regards

Jacen

——————————————————————————————————

If the Answer is helpful, please click "Accept Answer" and upvote it.