Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If there is a way, to deny local-system on a client machine to stop services with GPO?. The client is in a domain.

Example, making a anti-virus service that can't be disabled by local-system. I don't want to hurt other local-system actions (like log on, log off and such).

Thanks for help.

share|improve this question

migrated from security.stackexchange.com May 14 '13 at 11:12

This question came from our site for information security professionals.

    
Do you mean the system account? – Dr.Ü May 13 '13 at 13:03
    
Indeed, Local-System account. – Idan Cohen May 13 '13 at 13:04
    
I would go over to the Serverfault / Superuser guys... maybe they know a way... – Dr.Ü May 13 '13 at 13:09
    
OK, I was under the impression that Im in the right place, But I will go to ask there. – Idan Cohen May 13 '13 at 13:29
    
Who shall be able to stop the service at shutdown if not the LocalSystem account? – Werner Henze May 14 '13 at 13:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.