Just make them a local administrator for that one machine. This will give them the rights they need to stop/start a service without having admin rights on other servers.
If you can't trust this user, that's another issue all together.
I only use group policy for things that we are required to do for the entire site, not one individual.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.