Prevent from disabling a 3rd party system service....

[Ceez]

Hello everyone, I have a 3rd party service that involves print tracking. this software is deployed remotely from a console to the workstations.

some users are getting savvy and disabling the service by going onto services.

I set a gpo to prevent the service from being stopped by going to comp config-windows settings-security settings-system services. I selected the service - edit security and unchecked the Start,top and pause from the Allow column from the Administrator (computername\Administrators) group. I did not uncheck anything from INTERACTIVE or SYSTEM accounts listed.

Now obviously that works, BUT the users can still go in there and disable the service completely.

So my Q, how can I now remove the users ability of disabling the service completely?!!?

Thanks for the help,

Ceez

PS- XPsp3 & Server 2003

 

[TechyMcSe2k]

I would use a Hash rule in your software policies in Group Policy to prevent the ordinary user from running services.msc

You could also change the security on this file manually or through a script, but the GPO would be easier.