Solved

group policy - remove task manager for users except domain admins?

Posted on 2010-11-21
2
1,429 Views
Last Modified: 2013-12-28
we have a windows 2003 server terminal server that with multiple user's accessing.  I'm interested in disabling the task manager for standard users, but want to keep task manager accessible for domain administrators.  Can this be done or is it all or nothing?
0
Comment
Question by:jaypappas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 3

Accepted Solution

by:
Shane32EE earned 500 total points
ID: 34184108
Sure, you can do this.  The policy is in the User Configuration section of the Group Policy, so it is applied on a per-user basis.  I created a security group called 'non-admins' and added everyone that was not an administrator to that group.  I also added the 'Standard User' template user (in SBS 2008) to the security group, so that new users would automatically be added to the group.  Then, you create a new group policy (called, for example, 'non-admins policy') and under 'security filtering' add only the 'non-admins security group' you just created.  Then you can add any per-user configuration settings, like disabling the task manager, into this group policy.  Just be sure you do not add computer-level settings in this policy, or when the user logs in, it will add the settings computer-wide and leave them there when admins log on.

An alternative method of handling this is to create a task manager-blocking policy for Everyone, then create another policy to enable the task manager for Administrators.  Just make sure the admin one is above the everyone policy in the list, so it is applied last.

Shane
0
 

Author Closing Comment

by:jaypappas
ID: 34184124
manythanks!  
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question