Windows Services Permissions

Here's a question ...

Is it possible to deny a network of users access to their local services ie;
so that they cannot stop or start any services on their computer but still
allow the service to start so that it's associate application can run.

The scenario here is we have corporate anti-virus software installed and
some of our users don't like this because they feel the antivirus solution
slows down their computer and to get around this they disable the antivirus
service that runs the antivirus software.

What I would like to do is define a policy in the GPMC (Group Policy
Management Console - Windows 2003 Server) to prevent all users on the
network access to the antivirus service on their computer. I tested this
quite recently by defining a GPO for the services and setting Everyone deny
rights to the antivirus service. When the group policy got updated, nobody
had access to the service (which was a good thing) but, the antivirus
service also failed to run which resulted in the antivirus software not
performing as it should.

The antivirus services mainly uses the LocalSystem account. Can anyone
suggest if it's possible to alter the service's permissions in such a way by
defining a GPO to prevent user access to stop/start the service but allowing
it to start when the operating system loads so that the antivirus program
still runs as expected?

Regards
Craig





.

Relevant Pages

  • Windows Services Permissions
    ... Is it possible to deny a network of users access to their local services ie; ... slows down their computer and to get around this they disable the antivirus ...
    (microsoft.public.windows.server.active_directory)
  • Windows Services Permissions
    ... Is it possible to deny a network of users access to their local services ie; ... slows down their computer and to get around this they disable the antivirus ...
    (microsoft.public.windows.server.general)
  • Re: XP Update kills network
    ... I am running XP Pro SP2 and using Norton SystemWorks 2006, ... There is an additional symptom -- After the update, Norton AntiVirus says it ... That message took me to the event log, where automatic update posts an error ... Use GoBack to restore to a time before the update and the network works fine. ...
    (microsoft.public.windowsupdate)
  • Re: Difficulty working with large file in PPT 2007.
    ... A temporary operating system or network failure has ... Your network is unavailable, slow, or is corrupting data ... Your antivirus program may be causing problems accessing ...
    (microsoft.public.powerpoint)
  • Re: Best Antivirus
    ... me each supplied Mac antivirus software. ... Actually, it's worse than crap, since it causes annoyances. ... Any Windows machine which does not have adequate antimalware protection is ... unless that machine is on a network I'm ...
    (comp.sys.mac.apps)