Set permissions on Windows Service

Hi,

I'm developing a server app to run as a windows service, however i like to set permissions on this service such that no tom/***/harry can go and start/stop/pause/resume the Windows Service, any idea how i can accomplish this?

preferbly i wld like an AppAdministrator group set up in active directory such that only they can start/stop/pause/resume the windows service, can any1 help?

Simply remove the Users group from the NTFS permissions to access the binaries or data files the Windows Service is composed of.