none
add third party service to system services

    Question

  • Hi I would like to disable couple of third party services through Domain GPO on domain computers.

    So the question is what will be the proper way to add the service in question to system services GPO under:

    Comp CONF\Windows settings\security settings\System services.

    I need probably to "export" the service from a workstation with the needed service and then "import" it to one of domain controllers.

    How it could be achieved?

    Thx.


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Saturday, January 16, 2016 2:35 AM

Answers

  • Hi,
     
    Am 16.01.2016 um 03:35 schrieb pob579:
    > Hi I would like to disable couple of third party services through Domain
    > GPO on domain computers.
     
    a) open the GPMC\GPO on a system where the service is installed, then it
    will show up in GPEditor
     
    or
    b) navigate to the gpttmpl.inf file and edit it with notepad, add
    service name manually
     
    or
    c) use mmc-snapin\security templates on a system where service is
    installed create a *.inf file "offline", (then you do not need to
    installt GPMC) or edit this *.inf file with notepad, because it´s easier
    to find, than in sysvol ... import it in GPO by contextmenue on security
    settings in the GPEditor
     
    Mark
     
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Saturday, January 16, 2016 10:06 AM

All replies

  • Hi,
     
    Am 16.01.2016 um 03:35 schrieb pob579:
    > Hi I would like to disable couple of third party services through Domain
    > GPO on domain computers.
     
    a) open the GPMC\GPO on a system where the service is installed, then it
    will show up in GPEditor
     
    or
    b) navigate to the gpttmpl.inf file and edit it with notepad, add
    service name manually
     
    or
    c) use mmc-snapin\security templates on a system where service is
    installed create a *.inf file "offline", (then you do not need to
    installt GPMC) or edit this *.inf file with notepad, because it´s easier
    to find, than in sysvol ... import it in GPO by contextmenue on security
    settings in the GPEditor
     
    Mark
     
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Saturday, January 16, 2016 10:06 AM
  • Hi,

    You could have a try following steps as below:
    1. Start MMC on the server and add 'security templates'-snapin.
    Expand down to the templates in Security Templates -> C:\WINDOWS\security\templates to see what templates are found on the local server.
    2. Right-click on the folder-name and choose 'New Template' and enter a name for the template.
    Expand the template-name and choose 'System services'.
    3. Double-click on the service you want to configure and tick the checkbox 'Define this policy in the template'.
    4. Choose startup mode and click 'Edit security' to add the necessary permissions for the given service.
    5. Do the same thing for other services
    6.When all services are defined, right-click on the template-name and choose 'Save'.
    7. Locate the template-file in %WINDIR%\Security\templates and copy it to a machine where you have GPMC installed.
    8. Create/edit a GPO and expand down to 'Computer Configuration\Windows Settings\Security Settings'
    9.Right-click on 'Security Settings' and choose 'Import Policy'
    Your service is now in the policy. Just edit the service with the proper permissions and startup state as desired.


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, January 18, 2016 5:34 AM
    Moderator