>> And now I'm wondering... maybe it's a "right" you can set? (As you may 
>> remember, permissions apply to resources, rights apply to users.) I 
>> wonder if I can either assign the "stop service" right to a user group, 
>> or else create a mini-admins group and somehow revoke the "kick people 
>> off" right?...
>
> Apparently yes.
>
> Apparently anybody who has the "load or unload a device driver" right can 
> also start and stop system services. (WTF?) So all I need to do is create 
> a suitable group and assign people to it and I'm done. Yay, me! :-D

If you are worried enough that they will log off other users (either 
accidentally or maliciously), then why aren't you worried that they will 
start unloading device drivers? ;-)

Post a reply to this message