How safe is that?
i mean if someone is administrator (local administator) can change the
registry permissions. i need somehow to disable this ability even to
local admins. i want services to be allowed to run only if that is
specified in the DC.

I liked this answer. i'll try it. (Maybe create a ...

[ more ]