, suppose you're creating a group policy to give all users domain-wide ability to start/stop the Print Spooler service. 1) From Group Policy Management Console, create a new group policy object. 2) Edit the GP object in the Group Policy Management Editor (right-click the object from GPMC, choose Edit). 3) Open Computer Configuration / Software Settings / Security Settings / System Services. You'll see a list of system services 4) Find "Print Spooler." 5) Right-click it, choose Properties. 6) Check the box "Define this policy setting" 7) Click the button "Edit security." 8) A security dialog box appears. Now just add a permission (click "Add...") Fill in "Domain Users," click OK With "Domain Users" highlighted in the "Security for Print Spooler" dialog, ensure that the box next to "Start, stop and pause" is checked. Click OK twice to clear the dialog boxes. Now link the