Sc sdset

Applies To: Windows 7, Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2, Windows Server 2008, Windows Server 2008 R2, Windows Vista

Sets a service's security descriptor, using the Service Descriptor Definition Language (SDDL).


sc [<ServerName>] sdset <ServiceName> <ServiceSecurityDescriptor>


Parameter Description


Specifies the name of the remote server on which the service is located. The name must use the Universal Naming Convention (UNC) format (for example, \\myserver). To run SC.exe locally, omit this parameter.


Specifies the service name returned by the getkeyname operation.


Specifies the service descriptor in SDDL.


Displays help at the command prompt.


For more information about SDDL, see "Security Descriptor Definition Language" on the Microsoft Web site (

Additional references

Command-Line Syntax Key