disable task manager ...

  • Thread starter Thread starter Steven Wong
  • Start date Start date
S

Steven Wong

Hi,

Server : Windows 2003 Standard Edition

can I disable task manager for non-administrator ?
if i go to gpedit.msc and tick disable task manager,
even the users in admin group are not allow to use task manager..
is it possible just to disable task manager for non-administrators ?
Thanks

Steven
 
Normally Local Group Policy applies to all users that logon to the computer.
If this is a domain computer, you should configure that at the domain level.
Otherwise change the ntfs permissions for the executable taskmgr.exe so that
only admins can run it. That may not stop a malicious user from trying to
install a copy to a different place on the computer, but should work if the
users are considered trustworthy. A more secure method would be to use
Software Restriction Policy and create hash rules for executables that you
do not want normal users to run and configure the enforcement rule to not
apply to local administrators. You can access SRP via Local Security Policy
[secpol.msc]. --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
 
thanks steve, the 1st method works great for me.
My TS users won't see the desktop because they will start the
only application they need to use once logged in.
I just want to prevent them to press ctrl-alt-end and run explorer in task
manager
within a TS session.
Thanks for your help.

Steven
 
Back
Top