---
title: Advance Policy for Windows Services
slug: kronpam-agent-reference-guide/advance-policy-for-windows-services
docTags: 
createdAt: 2023-11-08T17:03:41.762Z
---

Windows services can be policed via Kron PAM. Local admin users can be restricted or normal users can have rights on the Windows services which needs administrator privileges. Policies can be written for a single user or user group over an agent or agent group. 

- To do that go to the **Services **section of **Advance Policy Screen**. 
- The click **Add **button.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/j3ZnNn01dhlKCu-fm2OeM_image.png)

- Give a name for your Service Policy and choose the user or user group.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/LOm_O1xesR1gg7iXADj1G_image.png)

- Select the agent or agent groups. 

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/7LHXABRb0uzglXNBm26j4_image.png)

- Choose the policy according to needs. If a user is a local administrator, you can restrict its rights with remove + allow or add + deny. If the user isn't a local administrator, you can give right it with add + allow or remove + deny. Each type is supported.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/zvycPSGHaaaOL9VnF0xqC_image.png)

- Lastly, you need to choose the service name from the drop-down menu and save the configuration.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ElTZQM7NsieYaAvrrG87o_image.png)