Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

f there is a way, to deny local-system account on a client machine to stop services with GPO?. The client is in a domain.

Example, making a anti-virus service that can't be disabled by local-system. I don't want to hurt other local-system actions (like log on, log off and such).

Thanks for help.

Add: I understand that there is a solution work windows 7 OS + active directory 2008 and above. But my question is mostly to windows XP

share|improve this question
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.