Block users from uninstalling an application

[austinmurtha]

We currently have audit required software that we want to prevent users from uninstalling. The current instance of the software does not have any backend lock, I know big oversight, but we need to find a way to prevent users with local admin rights from removing the application. I see to ways to do this. I could prevent the users from stopping the service. The only problem is that the software is not installed on the AGPM server so it does not see the service. Is there a way for me to add this? My only other thought was to add a policy that prevents users from going into add/remove programs and uninstalling the application. However I do not know how to do this. I don’t want to block the control panel all together, but want to prevent the application all together.

Thanks all!

[jeremym]

You want to use NTFS to protect the files. And you want to use Services Security to protect the service. That ought to do it.. these two will prevent users from removing stuff, because now they don't have any access rights. Does that make sense?