Need to stop admin users to only start selected services

Users have administrative access to servers and therefore can start,stop,restart services
Is there a method using PowerShell to prevent this?
I would like the user to only start,stop specific services on a server when using the MMC
e.g. stop and start the spooler service only, they would not be able to stop, start any other service
I could use SBINCTL.EXE , but could a user with administrative access revert the permissions back again to regain access

Welcome to the forum. :wave:t4:

Your question is quite vague. It needs clarity and details. Please update it with enough information that someone not seeing your environment could actually understand it.

Thanks in advance.