Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Determines which service accounts can register a process as a service.
Default: None.
For more information, see:
Deny logon as a service
Security Configuration Manager Tools
