Only give access to view "all users" and end some processes in task manager

Posted on 2008-09-29
Last Modified: 2013-12-04
I need to give access to a user in task manager to be able to view processes from all users and be able to end a specific process. I do not want to grant full Admin privileges to this user though.
Question by:Tyler Laczko
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 18

Expert Comment

by:Andrew Davis
ID: 22603633
are you talking about a terminal server?
LVL 10

Author Comment

by:Tyler Laczko
ID: 22605612
Yes, this is our main server that runs our accounting software, AD, the issue is that some people leave a program running over the weekend and we have a guy that needs to go into the program over the weekend to use it. Except we only have 3 usage licenses. So if they leave it running he cannot go into the program.

I would like to allow him to go into the task manager and search for the specific application and kill the process if others are using it.

But I do not want to give full Admin.
LVL 31

Accepted Solution

Henrik Johansson earned 500 total points
ID: 22606866
The checkbox to display other users' processes in task manager requires administrator privilege and it's not possibly to do give them the right to use that feature without granting them administrator access.

Instead, you should configure time limits for logon sessions on the TS to kick out users that leaves their sessions idle/disconnected longer tyhan X hours.
Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Sessions
* Sets a time limit for active but idle Terminal Services sessions
* Set time limit for disconnected sessions
* Terminate session when time limits are reached
The Ultimate Checklist to Optimize Your Website

Websites are getting bigger and complicated by the day. Video, images, custom fonts are all great for showcasing your product/service. But the price to pay in terms of reduced page load times and ultimately, decreased sales, can lead to some difficult decisions about what to cut.

LVL 10

Author Comment

by:Tyler Laczko
ID: 22608029
where do i do that
LVL 31

Expert Comment

by:Henrik Johansson
ID: 22608382
My previous post was referring to the path to the policy setting when editing a GPO or the local policy (gpedit.msc).
Create a GPO with GPMC and link the GPO to the OU with the TS.
Avoid local policies as any domain based GPO will override the settings.

You can also configure the settings locally on the TS by starting tscc.msc. Right-click on RDP-Tcp ->Properties->Sessions. The local settings will be overruled by any local or domain based policy.

If not having GPMC installed, you can download it at this link:
LVL 10

Author Comment

by:Tyler Laczko
ID: 22608969
I enabled it to log out and kill disconnected sessions after 2 hours. ill test and get back to ya.

Also I created a BAT file to solve my problem of only giving the user access to kill a process.
LVL 10

Author Comment

by:Tyler Laczko
ID: 22624653
The disconnect worked but was not the solution to this issue.
LVL 31

Expert Comment

by:Henrik Johansson
ID: 22640835
Main question ask about be able to see other users' processes in task manager, so why isn't http:#22606866 accepted as answer?
For reference about the checkbox, see MSFT-reply at

Author's closing comment is confusing. If it works, why isn't it the solution for the issue?
Why is automating logout of too long idle/disconnected sessions just a help in everyday work, but not solving the issue when the logout will terminate the forgotten process?

Featured Post

How Do You Stack Up Against Your Peers?

With today’s modern enterprise so dependent on digital infrastructures, the impact of major incidents has increased dramatically. Grab the report now to gain insight into how your organization ranks against your peers and learn best-in-class strategies to resolve incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question