> Perhaps they wanted the service killable, but for it to always restart? Then you use a DACL than gives only PROCESS_TERMINATE permission [1] to the desired g

> Perhaps they wanted the service killable, but for it to always restart? Then you use a DACL than gives only PROCESS_TERMINATE permission [1] to the desired group (Administrators, Users, …). If killed, service control manager will figure out that the program exited abnormally and restart it. [1] Overview of all permissions on process objects that can be allowed or denied in a DACL https://docs.microsoft.com/en-us/windows/desktop/ProcThread/process-security-and-access-rights https://docs.microsoft.com/en-us/windows/desktop/ProcThread/...