Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

group policy - remove task manager for users except domain admins?

Posted on 2010-11-21
2
Medium Priority
?
1,472 Views
Last Modified: 2013-12-28
we have a windows 2003 server terminal server that with multiple user's accessing.  I'm interested in disabling the task manager for standard users, but want to keep task manager accessible for domain administrators.  Can this be done or is it all or nothing?
0
Comment
Question by:jaypappas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 3

Accepted Solution

by:
Shane32EE earned 2000 total points
ID: 34184108
Sure, you can do this.  The policy is in the User Configuration section of the Group Policy, so it is applied on a per-user basis.  I created a security group called 'non-admins' and added everyone that was not an administrator to that group.  I also added the 'Standard User' template user (in SBS 2008) to the security group, so that new users would automatically be added to the group.  Then, you create a new group policy (called, for example, 'non-admins policy') and under 'security filtering' add only the 'non-admins security group' you just created.  Then you can add any per-user configuration settings, like disabling the task manager, into this group policy.  Just be sure you do not add computer-level settings in this policy, or when the user logs in, it will add the settings computer-wide and leave them there when admins log on.

An alternative method of handling this is to create a task manager-blocking policy for Everyone, then create another policy to enable the task manager for Administrators.  Just make sure the admin one is above the everyone policy in the list, so it is applied last.

Shane
0
 

Author Closing Comment

by:jaypappas
ID: 34184124
manythanks!  
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this modest contribution, I want to share with the IT community (especially system administrators, IT Support Engineers and IT Help Desks) about Windows crashes/hangs and how to deal with these particular problems.
By default Outlook 2016 displays only one time zone in the Calendar. The following article explains how to display two time zones in one calendar view.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question