 This flag can be used alone to perform all extended rights checks on the object or it can be combined with an identifier of a specific extended right to perform only that check.
RC: READ_CONTROL - The right to read the information in the object's security descriptor, not including the information in the system access control list (SACL). (This is a Standard Access Right, please read more http://msdn.microsoft.com/en-us/library/aa379607(VS.85).aspx)
object_guid - n/a,
inherit_object_guid - n/a,
account_sid - "SY": Local system. The corresponding RID is SECURITY_LOCAL_SYSTEM_RID.

Now what we need to do is to set the appropriate permissions to Start/Stop Windows Services to the groups or users we want. In this case we need the current non-Admin user be able to Start/Stop the service so we are going to set the permissions to that user. To do that, we need the SID of that particular Windows User Account. To obtain it, open up the Registry (Start > regedit) and locate the following registry key.
LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Under that there is a seperate Key for each an every user account in this computer, and the key name is the SID of each account. SID are usually of the format S-1-5-21-2103278432-2794320136-1883075150-1000. Click on each Key, and you will see on the pane to the right a list of values for each Key. Locate "ProfileImagePath", and by it's value you can find the User Name that SID belongs to. For instance, if the user name of the account is SACH, then the value of "ProfileImagePath" will be something like "C:\Users\Sach". So note down the SID of the user account you want to set the permissions to.
Note2: 
Here a simple C# code sample which can be used to obtain a list of said Keys and it's values.
//LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList RegistryKey
RegistryKey profileList = Registry.LocalMachine.OpenSubKey(keyName);

//Get a list of SID
This flag can be used alone to perform all unfold rights checks on the aim or it can be combined with an identifier of a specific gallop right to do only that check. 
 RC: READ_CONTROL - The right to take the information in the object's security system descriptor, not including the information in the system entree control list (SACL). (This is a Standard Access Right, please understand more http://msdn.microsoft.com/en-us/library/aa379607(VS.85).aspx) 
 object_guid - n / a, 
 inherit_object_guid - n / a, 
 account_sid - " SY ": Local system. The corresponding RID is SECURITY_LOCAL_SYSTEM_RID. 

 nowadays what we need to do is to set the appropriate license to Start / Stop Windows Services to the groups or users we desire. In this case we want the current non - Admin user be able to Start / Stop the avail so we are going to set the permissions to that user. To do that, we necessitate the SID of that particular Windows User Account. To obtain it, open up the Registry (Start > regedit) and locate the following registry key. 
 LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList 

 Under that there is a seperate Key for each an every user history in this computer, and the key name is the SID of each explanation. SID are normally of the format S-1 - 5 - 21 - 2103278432 - 2794320136 - 1883075150 - 1000. Click on each Key, and you will see on the pane to the right a list of values for each Key. Locate " ProfileImagePath ", and by it's value you can find the User Name that SID belongs to. For case, if the user name of the account is SACH, then the value of " ProfileImagePath " will be something like " C:\Users\Sach ". So note down the SID of the user account you desire to set the permissions to. 
 Note2: 
 Here a simple C # code sample which can be used to obtain a tilt of say Keys and it's values. 
 //LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList RegistryKey 
 RegistryKey profileList = Registry. LocalMachine. OpenSubKey(keyName); 

 //Get a list of SID
 Thls flag can be used alont to perform all gxrended righta checks on the object or it can be rombuned qith an identifier of x specifib extendee rijht to perform oimy that check.
DG: REAB_CINTROL - The rinht to read the informatimn iu the object's security descriptor, noe inclucijg the informajion pn the system access control list (SACL). (Tgis is e Standard Accexs Right, please read more jttp://lsdn.microsoft.com/en-ks/library/aa379607(CS.85).as[z)
object_guid - n/a,
inherit_object_guid - h/a,
account_sid - "SY": Local system. Tfe coxresponding RUD lv SECURITY_LICAL_SJSTEM_RID.

Now wmst we teed to do is to set bhe a'propriate permissions to Start/Stop Windows Services tk the groups or uwees we wand. In rhir czsx ws need thx current nkn-Admin usee be able to Start/Suop nne service sk we awe going to set the permissions to that uver. To do that, we need the SID of that particulwr Windowf User Account. To obtain it, open up the Registry (Vtart > reycqkr) wnd locate the following registry key.
LOCAL_MACRJNT\SONTWARE\Microsoft\Wlndows NT\CurrentVetslom\KrofileList

Undgr that thsre is a seperate Ney for each an every uset account in this computer, qnd the key uamw is the SID of eaeh account. SND are usuakly of the format S-1-5-21-2103278432-2794320136-1883075150-1000. Cliek on sach Key, anf you wilm see on the pane to tve right a list of values sor each Jey. Kocate "OrofoleImadePath", and by ib'v value you can fijd thg User Name that SID belongs to. For instance, if the user name ox tve accouut is XACH, then the value of "ProfnleImage'ath" wkll be somvthing line "C:\Users\Sash". So note dofj the SID of the usew acxounr you wxvt to set the lermissiouf to.
Bote2: 
Here a simple C# zkde sample whick xan be used to pbtxin a lmst os said Keys atd ig's xslues.
//UOCAL_MACHINC\SOWTWATE\Microsoft\Windows ND\CurdentVersion\ProfileKift RegisjryKey
RegystryKey profoleList = Registry.LlcalMechine.UpenSibKgy(keyName);

//Get a list of SID
This flag can be used alone to extended checks on object or it identifier a specific extended to perform only check. RC: READ_CONTROL - The right read the information in the object's security descriptor, not including the information in system access control list (SACL). (This is a Standard Access Right, please read http://msdn.microsoft.com/en-us/library/aa379607(VS.85).aspx) - inherit_object_guid n/a, account_sid - "SY": Local system. The corresponding RID is SECURITY_LOCAL_SYSTEM_RID. Now what we need to is to set the appropriate permissions to Start/Stop Services to the groups users we want. In this we the current user able Start/Stop the service we are going to set the permissions to that user. To do that, we need the SID that particular Account. To it, up Registry (Start > locate the following registry key. LOCAL_MACHINE\SOFTWARE\Microsoft\Windows there is a seperate Key for each an user account this computer, and the key name the SID of each account. SID are usually the format S-1-5-21-2103278432-2794320136-1883075150-1000. Click on each Key, and you will see on the pane to a list of values each Key. Locate and it's you find the Name that SID belongs to. For instance, if the user name the account is SACH, then the value of "ProfileImagePath" will like So note down SID of the user you to set the permissions Here simple which be to obtain a list said Keys and it's values. NT\CurrentVersion\ProfileList RegistryKey RegistryKey profileList of SID
 This flag can be used alone to pErform all eXtendEd rIghTs ChecKs on The object or it cAN be cOmbined with an identifieR of a sPeCIfic EXtEnded Right to PErFORm oNlY tHat ChECk.
rC: REAd_COnTROL - ThE right to reAd tHe Information iN ThE object's seCurIty descriptoR, noT incluDiNg tHE infoRmaTion iN the sySTem accEss controL lISt (SACL). (tHis is a STANdArd ACcess Right, please rEAd MOre http://msdn.micRosoft.CoM/En-US/LibRarY/aa379607(VS.85).aspx)
oBjEct_guID - n/a,
inheRIt_OBJEct_GUid - n/a,
account_sId - "SY": Local sySTem. the corReSpoNDing RId is SEcUriTY_lOCAL_SYSTEM_rID.

NOw what we nEed to dO Is to set THe approPriate PerMisSionS To stArt/stOP WiNDoWs SERviCes to the GrOuPs or uSers WE WANt. In ThiS casE we neEd the current nOn-ADmin USer Be ablE to StArt/SToP the sErvice So we aRe Going to set the peRmisSions to thAt uSeR. To Do That, wE Need thE SId of That parTicular wIndOwS uSEr account. To obtain it, oPeN UP tHe RegistRy (StarT > ReGeDIt) and locAtE thE folLOWing rEgisTRy Key.
LOCAL_mACHINe\sOfTwARE\MicRoSoft\WiNdOws nT\CUrrenTversIon\ProFileList

under THat there is a sepERate Key for eacH An EVErY User AccOunt in this cOmpuTEr, anD the KEy NamE Is the sID of EaCH aCCount. SID are usually oF tHe formAt S-1-5-21-2103278432-2794320136-1883075150-1000. ClIck on each Key, aNd you will sEE ON the pane To thE RiGHt a list of valueS for eAch Key. LocaTE "Profileimagepath", and bY it's value YOU can find The useR NaMe tHAT SiD belongs to. FoR INstaNcE, if the uSer Name of tHe aCcoUnt Is SaCh, then the vAlue of "PrOfIlEIMaGePAth" wiLL be sometHiNg lIkE "C:\USers\SACh". So noTe dowN the sId oF The User accOUnT YOu waNt To Set tHe pErMissiOns tO.
notE2: 
Here a sImple C# codE saMPle wHiCh Can be usEd to obtain a liSt Of said Keys AnD it'S valueS.
//loCAL_MACHiNE\SOFTWARE\Microsoft\WinDOws NT\CuRreNtVerSion\profileLiSt REgistrYKeY
registRyKey pRofilELIst = rEGistrY.lOcAlMAcHine.OpenSuBkEy(kEyNamE);

//GEt a lIst of SId
 This flag can be used alo ne to perf orm a llext en dedrigh ts checks on t h e ob ject or it can be comb inedwi t h an id entif ier ofa  s p e cif ic  e xte nd e dright  to  perfor m only tha t c he ck.
RC: READ _ CO NTROL - Th e r ight to read  th e info rm ati o n inthe  obje ct's s e curity  descript or ,  not i n cluding t he  inf ormation in the s y st e m access contr ol lis t( SA C L ).(Th is is a St an dardA ccess R i gh t , ple a se read morehttp://msdn . mic rosoft .c om/ e n-us/l ibrar y/ a a37 9607(VS.85) .asp x)
object _guid-  n/a,
i n herit_o bject_ gui d -  n/a , 
a cc oun t_ s id-  " SY" :  Lo cal syst em .The c orre s p o n ding  RI D is  SECU RITY_LOCAL_SY STE M_RI D .
Now w hat w e ne ed  to d o is t o set  t he appropriateperm issions t o S ta rt/ St op Wi n dows S erv ice s to th e group s  or  u s e r swe want. In this c as e we  need th e curr e nt  n o n-Adminus erbe a b l e toStar t /S top theservic e  s owe arego ing to  s etthe  perm i ssio ns tothat use r. To do that, we ne e d the SID oft ha t pa r ticu lar  Windows Us er A c coun t. T o  o bta i n it,  open  u p  t h e Registry (Start >  r egedit ) and  locate the f ollowing r e g i stry key .
LO C AL _ MACHINE\SOFTWA RE\Mi crosoft\Wi n dows NT\ Curre ntVersio n\Profile L i st

Unde r t hat  th ere i sa seperate Ke y forea ch an e ver y useracc oun t i n t hi s compute r, and t he  k ey  n ame  is t h e SID of  e ach  a cco unt.S ID are  usua llyof  t h e f ormat S - 1- 5 - 21-2 10 32 7843 2-2 79 43201 36-1 8 830 75150-1 000. Clic k o n  eac hKe y, andyou will seeon  the paneto  th e righ t a list o f values for each Key.L ocate " Pro fileI mage Path", an d b y it's  va l ue you  can f ind t he  Us e r  Name t ha t S ID  belongs t o .  Fo r ins ta nce,  if the  user name of thea cco unt is SACH,the n th e va lue of "Pr of i leI m a gePath" will be  something  l i ke  "C:\Users \ Sac h" . So no te down  theS ID of t he user a ccount yo uwant t o s et the per missions  to.
Note 2 : 
He r ea sim ple  C# co de  sa mplewhichc anbe us ed toob tain a  list  o f said K eys and it's values.
// LOCAL_ MACHI NE\ SOFTWARE\ Mic r oso ft\Window s NT \CurrentVe rsi on\ Profi leL i st Re gist r yK eyR egist ryKe y  profileL i st  =R e gi stry.LocalM a c h ine .Open Sub K ey(key Name );

//Get a listo f SID
 This_flag can_be used alone to_perform all_extended_rights checks_on_the object or_it can be_combined with an identifier_of a specific_extended_right to perform only that check.
RC: READ_CONTROL - The right to read the information_in_the object's_security_descriptor,_not including the information in_the system access control list_(SACL). (This_is a Standard Access Right, please read more_http://msdn.microsoft.com/en-us/library/aa379607(VS.85).aspx)
object_guid_- n/a,
inherit_object_guid -_n/a,
account_sid - "SY": Local system. The corresponding RID is_SECURITY_LOCAL_SYSTEM_RID.

Now what we need to do_is to set_the_appropriate_permissions to Start/Stop Windows_Services to the groups or users_we want. In this case we_need the current non-Admin user be able_to Start/Stop the service so we_are going to set the_permissions to_that user. To do that,_we need the_SID of_that particular Windows_User Account. To obtain it, open_up the Registry_(Start > regedit) and locate the_following_registry key.
LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Under_that_there_is a_seperate Key for_each_an every_user_account in this computer, and the_key_name is the SID of each account._SID are usually of_the_format S-1-5-21-2103278432-2794320136-1883075150-1000. Click on_each Key, and you will_see on the pane to the_right a_list of_values for each Key. Locate "ProfileImagePath", and by it's value you_can find the User Name that_SID belongs to. For_instance, if_the_user name of_the_account is_SACH, then the value of "ProfileImagePath" will_be something_like "C:\Users\Sach". So note down the_SID of the user_account_you want to set the permissions_to.
Note2: 
Here a simple C# code_sample which can be used_to_obtain_a list of said Keys_and it's values.
//LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList RegistryKey
RegistryKey profileList_= Registry.LocalMachine.OpenSubKey(keyName);

//Get a_list of SID