You can curtail the services used on the network

You can curtail the services used on the network. Such tasks are regulated by group
policies. On a local system, in your case, you are however required to define security
template. This way you can apply the desired settings on the machine via the Snap-in
"Security Configuration and analysis".
First load the Microsoft Management Console. Click on Start->Run, type "mmc" and click on
"OK". Open the existing console file or create a new one by clicking on "File->Add/Remove
Snap-in". Then in the Standalone tab click on "Add". Now close all the dialog boxes that
have been opened. In the console, now open the "Security template" by clicking on the
preceding plus sign. Right click on the desired directory and select "New Template". Name
the template, give a description for it and click on "OK". Open the "Security template"
folder and the file with the new template that you created. Go to the entry "System
Service" under "Compatws". Right click on the desired service for e.g. Print Queue" and
select properties. Activate the option "Define this policy setting in the template". The
security setting are opened. Here click on "Add" in the input field of the following dialog
box, type the name of the user who should get the rights to the service. Click on "Verify
name" and on successful colclusion, click ok. The new user is now added to the previous
dialog box and is marked. Under this, you can define the authorizations for him. A user
should at least able to "Read". "Start, pause and suspend" to be able to start and end a
service. Activate the necessary control box in the "Allow" column. Finally, confirm the
settings with "Apply" and "OK". Again, defina the start moder or the service in the
original dialog box. Select Automatic" to do this, and reconfirm with "Apply" And "OK".