ACL for processes in domain

hey geeks ...my question is how i can control ACL for processes in domain for all clients here is the scenario
recently been noticed some clients suspended processes on their machines which affects the company so i want to modify the security control entity for some processes (like suspend resume terminate....) or at least is there any way to log any attempt to suspend or terminate any process so a Domain administrator can check later?
shouldnt it be somewhere in GPO? i could find services but not processes

PS : we are using windows server 2003 and 2008
PPS: sorry if i am posting in the wrong section but i couldnt find better place to post in