group policy - remove task manager for users except domain admins?

we have a windows 2003 server terminal server that with multiple user's accessing.  I'm interested in disabling the task manager for standard users, but want to keep task manager accessible for domain administrators.  Can this be done or is it all or nothing?
jaypappasAsked:
Who is Participating?
 
Shane32EECommented:
Sure, you can do this.  The policy is in the User Configuration section of the Group Policy, so it is applied on a per-user basis.  I created a security group called 'non-admins' and added everyone that was not an administrator to that group.  I also added the 'Standard User' template user (in SBS 2008) to the security group, so that new users would automatically be added to the group.  Then, you create a new group policy (called, for example, 'non-admins policy') and under 'security filtering' add only the 'non-admins security group' you just created.  Then you can add any per-user configuration settings, like disabling the task manager, into this group policy.  Just be sure you do not add computer-level settings in this policy, or when the user logs in, it will add the settings computer-wide and leave them there when admins log on.

An alternative method of handling this is to create a task manager-blocking policy for Everyone, then create another policy to enable the task manager for Administrators.  Just make sure the admin one is above the everyone policy in the list, so it is applied last.

Shane
0
 
jaypappasAuthor Commented:
manythanks!  
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.