How to prevent users from disabling Altiris service using GPO

Hi,

Several users in our Domain are disabling Altiris client service and making software delivery a difficult task for me. I know SEP have Tamper Protection to avoid this and can be configured from the Console. I have gone through few connect forum discussion and decided to use a script or Group Policy to keep the agent service running. Can someone help me with a script that can be pushed via GPO.

The following article seems to be a good one “https://www-secure.symantec.com/connect/articles/securing-your-altiris-agents-local-administrators-using-group-policy"

But need a script to look for the agent service and keep it running always

Thanks :)