xdmv
I belong to SuRun user's group.
I launch Services (services.msc) as admin. Stop SuRun service. Close Services window.
Cannot use any application as admin until next reboot.
Even cannot use Secondary Logon service to start SuRun again as another user.
I think I'm missing something...
Thanks in advance.
xdmv
Yes, I tested again and it stoped again.
# ideas...
- Users from SuRun group cannot stop SuRun service, even as administrators.
- Only Adminitrators can stop SuRun service (is it helpful?).
- SuRun service can be disable only by uninstallation.
- SuRun is a strong security feature for OS, so it can not be killed.
I know, Users from SuRun group still remain as Users (limited) group.
Kay
The service is essential for SuRun. Stopping it will disable SuRun. This is (by intention) the way it is.
Non restricted SuRunners may stop SuRuns service as they have no restrictions on using the system. They have full trust and use SuRun only to avoid working as admin on their machines.
Restricted SuRunners may stop the Service only if you allow them to do so. They can only run predefined apps as admin. You should carefully think about what apps you allow them to run.
Stopping SuRuns service will not violate Windows security.
It just disables running apps as admin without an admin password.
Logging on as real admin (or runas /u:administrator "mmc compmgmt.msc") will give you the chance to start the service again.
xdmv
My mistake, Kay...
I'm a little excited for your great application.
Everyday I find new ways to interacting SuRun with my system and apps.
So far, it is perfect for Windows advanced users.