If there is a way, to deny local-system on a client machine to stop services with GPO?. The client is in a domain.
Example, making a anti-virus service that can't be disabled by local-system. I don't want to hurt other local-system actions (like log on, log off and such).
Thanks for help.