Making a service unstoppable, // Using gpmc.msc without a domain.

Question

0.00/5 (No votes)

See more:

Hi, my cousin is the owner of a cibercafe (mostly oriented to online games) with almost 30 PCs. We use NetLimiter 3 to control the bandwidth of each computer, but the problem is, some users know how to stop the service. We use 2 administrator accounts, and yeah, the "public" account needs to be an admin because some games have problems if not. The only real answer i've found so far is to use GPOs with the RSAT, but everytime i try to use it, it says that i need to connect to a domain (which we don't have).

1. Is there a way to make a process unstoppable?
2. Is there a way to restrict the "public" admin rights over services?
3. How can i create a domain without failing in the process?

Thank you in advance community.

Edit. If i can get gmpc.msc to work, i don't mind configuring each PC.
Check this: http://social.technet.microsoft.com/Forums/windowsserver/en-US/2758d69a-60e8-4a5b-83dd-fc7d8e15bdc1/preventing-users-from-stopping-a-particular-service-with-a-gpo

Is there a way to create another service to work together with nlsvc(NetLimiter service)? I mean, if the main service is stopped, then the secondary services check it and reactivated it again, something like that.

Posted 16-Feb-14 1:00am

Member 10600316

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

**Zoltán Zörgő** · Accepted Answer · 2014-02-16T01:34:00

You can use Local Group Policy (and Local Security Policy) editors (http://www.sevenforums.com/tutorials/7357-local-security-policy-editor-open.html[^]) to achieve much the same results. In your case the User Rights Assignment[^] section is the key.
You have to separate administrative privileges between two accounts. You have to do a really fine tuning, because you can make the system unusable if you get the local Administrator account restricted.

What you also can consider is using a Linux system as Domain Controller: https://wiki.archlinux.org/index.php/Samba_4_Active_Directory_Domain_Controller[^]