Solved

group policy - remove task manager for users except domain admins?

Posted on 2010-11-21
2
1,416 Views
Last Modified: 2013-12-28
we have a windows 2003 server terminal server that with multiple user's accessing.  I'm interested in disabling the task manager for standard users, but want to keep task manager accessible for domain administrators.  Can this be done or is it all or nothing?
0
Comment
Question by:jaypappas
2 Comments
 
LVL 3

Accepted Solution

by:
Shane32EE earned 500 total points
ID: 34184108
Sure, you can do this.  The policy is in the User Configuration section of the Group Policy, so it is applied on a per-user basis.  I created a security group called 'non-admins' and added everyone that was not an administrator to that group.  I also added the 'Standard User' template user (in SBS 2008) to the security group, so that new users would automatically be added to the group.  Then, you create a new group policy (called, for example, 'non-admins policy') and under 'security filtering' add only the 'non-admins security group' you just created.  Then you can add any per-user configuration settings, like disabling the task manager, into this group policy.  Just be sure you do not add computer-level settings in this policy, or when the user logs in, it will add the settings computer-wide and leave them there when admins log on.

An alternative method of handling this is to create a task manager-blocking policy for Everyone, then create another policy to enable the task manager for Administrators.  Just make sure the admin one is above the everyone policy in the list, so it is applied last.

Shane
0
 

Author Closing Comment

by:jaypappas
ID: 34184124
manythanks!  
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
domain controllers numbers 4 72
Server 2016: DNS on the server or router? Advices? 4 19
Problem to App source 6 32
Reinstall Windows 10 3 14
This is an article about Leadership and accepting and adapting to new challenges. It focuses mostly on upgrading to Windows 10.
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now