Q. How can I control how to stop or start certain services?

Open the GPO in Group Policy Editor (GPE) or create a new GPO (gpedit.msc).

In the treeview pane, expand Computer Configuration, Windows Settings, Security Settings, System Services.

Right-click the service you want to change--for example the DHCP Server service--and click Properties. A dialog box that's similar to the one at Figure is displayed.

Check "Define this policy setting" and set the startup mode. For example, set the mode to Automatic if you want the service to start when the computer starts.

Click Edit Security.

You can now control which users and groups can access the service and stop or start it. Click OK after you've made your selections. It's very important that you don't change the Administrators group and SYSTEM permissions; their permissions should always be Full Control.

Click OK to all dialog boxes to apply the change. You'll need to refresh the GPO for the change to take effect.