Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

If there is a way, to deny local-system on a client machine to stop services with GPO?. The client is in a domain.

Example, making a anti-virus service that can't be disabled by local-system. I don't want to hurt other local-system actions (like log on, log off and such).

Thanks for help.

share|improve this question
Do you mean the system account? –  Dr.Ü May 13 '13 at 13:03
Indeed, Local-System account. –  Idan Cohen May 13 '13 at 13:04
I would go over to the Serverfault / Superuser guys... maybe they know a way... –  Dr.Ü May 13 '13 at 13:09
OK, I was under the impression that Im in the right place, But I will go to ask there. –  Idan Cohen May 13 '13 at 13:29
Who shall be able to stop the service at shutdown if not the LocalSystem account? –  Werner Henze May 14 '13 at 13:25
show 1 more comment

migrated from security.stackexchange.com May 14 '13 at 11:12

This question came from our site for Information security professionals.

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.