Security on specific services

[ravanis]

I am looking for a way to only allow a doman admin to
start / stop / disable, or contorl a particular service.
Ie. I don't want to have the end user disabling Norton
AntiVirus services. Is there a way, either via Local
group policy or though the registry to do this. Thanks.

 

[IBTerry [MSFT]]

This is built into domain level policies. These settings do not exist at
the local policy level.

IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

This would be on the users local workstation services.

 

[Marco]

Are your end users members of the local Administrators or Power Users groups
by any chance? I am asking because, normally, regular users cannot stop
system services.