Protecting the service of a specific application

Amit Sharma

7/8/24, 7:28 AM

We have a business requirement where we don't want even Admins to be able to stop a service of a specific application running on windows machines. Reason being the application plays an important role in the security and the only barrier for security is the running state of a service. We want a specific group of people only to manage the service.. Is there a way to achieve this?

1 + 1

windows

permissions

service

Peter Hahndorf

7/8/24, 8:43 AM

Each service has an Access Control List, add the new group to it and remove the Administrators group from it. Can be done on the command-line, or easier using tools like SystemInformer. Test before using in production.

Score:0

Server

bjoster

7/11/24, 1:21 PM

Just edit the ACL of the service. This can be done locally or through GPO; which should be edited on a machine using ("seeing") that service. Usually you would use GPO, but GPOs can be changed by admins, so consider that carefully.

How?

In your GPO expand Computer Configuration, expand Windows Settings, expand Security Settings, and then click System Services. In the right pane, double-click the service to which you want to change permissions and the security policy setting for that specific service will be displayed. Click to select the "Define this policy" setting check box and edit the ACL.

More on this here: How to Assign System Service Permissions

+ 1

Amit Sharma

7/17/24, 8:32 AM

Thank you for all the replies:) I will test these option...

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Protecting the service of a specific application

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.