...
Internet Explorer inherits administrative rights from administrator users and is therefore able to stop Windows services, with the following configuration:
...
- In the Security Manager Console, click the Policies tab
- In the file library in the left pane, navigate to Application Control > Policies> Privilege Management > Limit Internet Browser and Mail Client Process Rights.
- In the right pane, enable the policy by clicking the On/Off toggle.
- Open Internet Explorer as an administrator, select File > Open, and then browse to cmd.exe in the SYSTEM directory.
- Attempt to stop the MSN Messenger service using the command line: NET STOP Messenger.
An Application Control message appears on the taskbar stating IEXPLORER.EXE has had its rights reduced and you are unable to stop the service.
Related Links