you can start sql service using low priviledge user ,

also you can remove rights of user which having access on sql server installation folder

check cmdshell is not enable.