...
- Harden the Arellia Agent and ACS services against administrators (for details about service hardening, go to Service Hardening).
Remove the debug privilege from Administrators by enabling the Remove Advanced Privileges for Interactive Users ACS policy.
Note title Warning Debug rights trump Remove Advanced Privileges for Interactive Users policy, so be aware anyone with debug rights will still be able to kill protected processes.
- Remove the terminate privilege from Administrators by creating a new process security action and then applying it via an Application Control Policy targeting the "Arellia.Agent.Service.exe" executable. (For details about adjusting process security, go to Adjust Process Security.)
Related
...
links
How to enable process and service hardening using ACS and LSS
...