Advance Policy for Windows Services

windows services can be policed via kron pam local admin users can be restricted, or normal users can have rights on the windows services that require administrator privileges policies can be written for a single user or user group over an agent or agent group to do that, go to the services section of the advanced policy screen click the add button give a name for your service policy and choose the user or user group service rule can be enabled or disabled when it is disabled rule will be reverted select the agent, agent groups, or device group choose the policy according to needs if a user is a local administrator, you can restrict their rights with remove + allow or add + deny if the user isn't a local administrator, you can give rights with add + allow or remove + deny each type is supported lastly, you need to choose the service name from the drop down menu and save the configuration while giving rights to windows services, sometimes we can have errors due to windows default service permissions we may not apply to given rights on windows services please check the detailed logs