MEM policy to prevent stopping sep service

Hi, 

we are trying to prevent users from stopping sep services & start them if stopped. 

i see an option in HI policy to restart the service if it is stopped. However, when smc is stopped HI is not going to work & this functionality is pretty much pointless. correct me if am wrong & if it works.

I also see Mick’s comment in below article to use MEM SEHOP to prevent service stopping. can someone help how this can be done? 

https://www.symantec.com/connect/forums/script-start-sep-service?1565754867759

thanks in advance for suggestions.