Sets a service's security descriptor, using the Service Descriptor Definition Language (SDDL).


sc [<ServerName>] sdset <ServiceName> <ServiceSecurityDescriptor>


Parameter Description


Specifies the name of the remote server on which the service is located. The name must use the Universal Naming Convention (UNC) format (for example, \\myserver). To run SC.exe locally, omit this parameter.


Specifies the service name returned by the getkeyname operation.


Specifies the service descriptor in SDDL.


Displays help at the command prompt.


For more information about SDDL, see "Security Descriptor Definition Language" on the Microsoft Web site (

Additional references