Solved

group policy - remove task manager for users except domain admins?

Posted on 2010-11-21
2
1,395 Views
Last Modified: 2013-12-28
we have a windows 2003 server terminal server that with multiple user's accessing.  I'm interested in disabling the task manager for standard users, but want to keep task manager accessible for domain administrators.  Can this be done or is it all or nothing?
0
Comment
Question by:jaypappas
2 Comments
 
LVL 3

Accepted Solution

by:
Shane32EE earned 500 total points
ID: 34184108
Sure, you can do this.  The policy is in the User Configuration section of the Group Policy, so it is applied on a per-user basis.  I created a security group called 'non-admins' and added everyone that was not an administrator to that group.  I also added the 'Standard User' template user (in SBS 2008) to the security group, so that new users would automatically be added to the group.  Then, you create a new group policy (called, for example, 'non-admins policy') and under 'security filtering' add only the 'non-admins security group' you just created.  Then you can add any per-user configuration settings, like disabling the task manager, into this group policy.  Just be sure you do not add computer-level settings in this policy, or when the user logs in, it will add the settings computer-wide and leave them there when admins log on.

An alternative method of handling this is to create a task manager-blocking policy for Everyone, then create another policy to enable the task manager for Administrators.  Just make sure the admin one is above the everyone policy in the list, so it is applied last.

Shane
0
 

Author Closing Comment

by:jaypappas
ID: 34184124
manythanks!  
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

For a variety of reasons, it sometimes makes sense to reboot a Windows-based computer on a regular, perhaps daily basis. This "cures" a lot of ills by resetting processes, flushing caches, refreshing memory, and reestablish network connections. In a…
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now