...
Users with administrator rights can maliciously or inadvertently change Windows components resulting in compromises to security. Users often disable services or applications that they deem a nuisance. These "nuisance" applications include security and management applications that are critical to the protection and maintenance of systems and disabling them has detrimental consequences. Service Hardening enables Services (with their associated files and registry keys) so that even Administrators or users with administrator rights cannot disable or delete them.Arellia can lock services down so even administrators can't stop a protected service.
To lock a service down using Arellia:
- Enable the Windows Service Inventory Policy
- (optional) Create a Service Security Descriptor
- Apply Service Hardening