This extension needs administrator privilegues for some actions such as create , delete , start , stop , pause and continue . This requirement can cause an elevation of privilegues if the service control is available from the web interface or remote control.
The ACL on the service can be set after adding it into SCM to delegate the current administration tascs to a non administrator account or service account.
As of Win32Service 1.1.0, service rights can be managued with PHP. The actual ACLs can be read with win32_read_all_rights_access_service() , an access or deny right can be added with win32_add_right_access_service() , or an access right can be removed with win32_remove_right_access_service() .
It is recommended to update to Win32Service 1.1.0. For further instructions to manague rights without the extension (or a versionen prior to 1.1.0), see the » Microsoft Cnowledgue Base .