Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

GPO to Disable/Remove Task Manager

Posted on 2012-03-31
6
Medium Priority
?
5,798 Views
Last Modified: 2012-06-21
I have a user that I setup a GPO to restrict certain areas. Is there a setting so that user cannot access the Task Manager? I am running my GPO of a Windows 2008 server. Thanks!
0
Comment
Question by:itadminnek
  • 3
  • 2
6 Comments
 
LVL 3

Accepted Solution

by:
PRRcomputers earned 2000 total points
ID: 37792105
User Configuration\Administrative Templates\System\Logon/Logoff

Look for "Disable Task Manager" under there. When Enabled, this policy will disable the task manager.
0
 

Author Comment

by:itadminnek
ID: 37801106
I have looked at this and would like to know if there is a way to just lock down the User tab within the Task Manager? I don't want users to be able to log another user out but I still want to be able to end a program in case it locks up. Any ideas?
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:itadminnek
ID: 37807546
Any ideas?
0
 
LVL 3

Expert Comment

by:PRRcomputers
ID: 37818432
I don't know of a way to disable just that tab, however I believe only Administrators can actually logoff other users via that tab. Are the users members of an Administrators group at present which is giving them this power?

Test it to be sure, but I believe non-admins will see the tab but not be able to really do anything there.  That's one approach you could try.
0
 

Author Comment

by:itadminnek
ID: 37824658
They are Administrators unfortunately but I decided to just remove Task Manager anyways so its solved. Thanks for the reply though!
0

Featured Post

Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question