How to limit a service's rights to manage Windows Firewall?

Question

Windows Server

The server has a service installed with administrative privileges that it needs to run properly. It was necessary to restrict her network access. I went into the advanced firewall settings and turned off the corresponding rules that were created during installation.
But the problem is that when restarting this service, it activates the firewall rules itself. If you switch them to the "blocked" mode, the service itself changes to "allowed".
Is it possible to somehow differentiate a regular firewall, that is, to give the opportunity to manage only one administrator? Or somehow solve this issue differently.

Answer 1

Remove the "Network Configuration Operators" rights from the service.