Service Hardening

Harden Critical Applications

Users with administrator rights can maliciously or inadvertently change Windows components resulting in compromises to security. Users often disable services or applications that they deem a nuisance. These "nuisance" applications include security and management applications that are critical to the protection and maintenance of systems and disabling them has detrimental consequences. Arellia can lock services down so even administrators can't stop a protected service.

To lock a service down using Arellia:

1. Enable the Windows Service Inventory Policy
2. (optional) Create a Service Security Descriptor 
3. Set Restrictive Service Security Client Task

To set the service security descriptor to the default using Arellia use the Set Standard Service Security Client Task.