...
With this configuration, Internet Explorer has inherited administrative rights from the user and is therefore able to stop Windows Services.
Scenario Resolution
To prevent Internet Explorer from stopping Windows services, perform the following steps:access the Application Control Policies page:
- In the
...
- Symantec Management Console,
...
- on the Home menu, click Arellia > Application Control
- In the left pane,
...
- select Policies > Application Control > Application Control Tasks > Application Control Policies > Limit Internet
...
- Browser and Mail Client Process Rights
To prevent Internet Explorer from stopping Windows services, perform the following steps:
- In the right pane,
...
- enable the application by using the On/Off toggle.
- Open Internet Explorer, select File > Open and browse to cmd.exe in the SYSTEM
...
- directory.
- Attempt to stop the MSN Messenger service using the command line: NET STOP Messenger.
An Application Control message appears on the taskbar stating "IEXPLORER.EXE has had its rights reduced" and you are unable to stop the service.