Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

f there is a way, to deny local-system account on a client machine to stop services with GPO?. The client is in a domain.

Example, making a anti-virus service that can't be disabled by local-system. I don't want to hurt other local-system actions (like log on, log off and such).

Thanks for help.

Add: I understand that there is a solution work windows 7 OS + active directory 2008 and above. But my question is mostly to windows XP

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.