System Controls
Use Privilege Management to give a higher level system administrator the ability to stop an administrative user from altering settings that they should not change, for example, firewalls and certain services. Use Privilege Management to reduce administrative privileges for certain processes. Although the user has administrative privileges, the system administrator retains control of the environment.
Select to add items to elevate or restrict rights for the following system controls:
- Uninstall Control Item
- Service Control Items
- Event Log Control Item
- Process Termination Control Item
Try it yourself
Restrict Uninstall Permissions
In our Components example we gave our everyone group permissions to the Uninstall or Change a Program in the Add and Remove Programs component, however there are certain programs that we do not want members of the everyone group to have permissions to uninstall.
- In the Application Control Configuration Editor, navigate to Rule Sets > Group > Everyone > Privilege Management.
- In the right hand work area select the System Controls tab.
- In the work area, right-click and select Uninstall Control Item from the context menu.
- In the Add Uninstall Control Item dialog, in Application enter Procmon.exe.
- Select Add and the item display in the list, check that the Policy is Builtin Restrict.
- Save and deploy the configuration.
Test it
- Open Add/Remove Programs.
- Locate Procmon.exe, attempt to uninstall the program, uninstall should be denied.