The book advises on page 493 to alter the Windows file security on the caspol utility to prevent unauthorized users or viruses from altering the security policy.

What are the minimum machine accounts that need access to this file?