Re: disable task manager ...

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/05/05 

Date: Sat, 5 Feb 2005 14:02:40 -0600

Normally Local Group Policy applies to all users that logon to the computer.
If this is a domain computer, you should configure that at the domain level.
Otherwise change the ntfs permissions for the executable taskmgr.exe so that
only admins can run it. That may not stop a malicious user from trying to
install a copy to a different place on the computer, but should work if the
users are considered trustworthy. A more secure method would be to use
Software Restriction Policy and create hash rules for executables that you
do not want normal users to run and configure the enforcement rule to not
apply to local administrators. You can access SRP via Local Security Policy
[secpol.msc]. --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

"Steven Wong" <sazabi75@hotmail.com> wrote in message
news:%23t6faH3CFHA.628@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> Server : Windows 2003 Standard Edition
>
> can I disable task manager for non-administrator ?
> if i go to gpedit.msc and tick disable task manager,
> even the users in admin group are not allow to use task manager..
> is it possible just to disable task manager for non-administrators ?
> Thanks
>
> Steven
>
>

Relevant Pages

  • Re: startup/shutdown events not being logged
    ... First make sure you are looking in the security log for those events in the ... Security Policy on one of the computers - secpol.msc to see if the policy ... applied to a domain computer and the last time they were applied. ...
    (microsoft.public.windows.server.security)
  • Re: How can I start regedit after policy active
    ... Probably the best way for a non domain computer is to use the free Shared ... Computer Toolkit to do what you want. ... how can I force this policy only the users? ... All my pcs is not in the domain controler ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Simple File Sharing question
    ... and as I do not recall seeing the policy for forceguest being ... Now that I think about it more, for a domain computer the best option ... >is to enforce the security option network access:sharing and security model ... >>> fail though a Group Policy startup script would work but you are right ...
    (microsoft.public.windows.server.security)
  • Problems with gpo
    ... I have problem wtih gpo which I can't resolve from little time. ... The problem is that computer policy for domain computer is not applied. ... the console or the application event log for events between 2005-10-10 ...
    (microsoft.public.win2000.active_directory)