f there is a way, to deny local-system account on a client machine to stop services with GPO?. The client is in a domain.
Example, making a anti-virus service that can't be disabled by local-system. I don't want to hurt other local-system actions (like log on, log off and such).
Thanks for help.
Add: I understand that there is a solution work windows 7 OS + active directory 2008 and above. But my question is mostly to windows XP