Solved

Windows Server 2012 Standard Terminal Server Users Access to Task Manager

Posted on 2015-02-04
7
692 Views
Last Modified: 2015-07-13
We just recently implemented a new Windows Server 2012 Server that we use as a Terminal Server.  So I have users logging in to their RDP Sessions and all is good.  But when one of their programs causes an issue in the RDP session they don't have access to the Task Manager to end the problem program.  Is this something a Group Policy would fix?  I would like them to be able to only end their own programs.

Thanks
Kevin
0
Comment
Question by:kevin1000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 24

Expert Comment

by:VB ITS
ID: 40590766
Users should have access to the Task Manager by default unless you already have a policy in place which prevents them from being able to launch it. FYI users can use the Ctrl + Alt + End key combination to launch the Task Manager as this simulates the Ctrl + Alt + Delete key combination in a remote session.

As long as your users don't have Administrator rights on your 2012 RDS server then they won't be able to end anybody else's processes but their own.
0
 

Author Comment

by:kevin1000
ID: 40591448
I'm probably missing something but when I sit at a users workstation and start the Task Manager from the right-click on the taskbar I get the authentication screen where I have to put in my Admin username and password.  When a user put their login information in to that screen, they get "Login Failure.  User has not been granted the requested logon type at this computer."

Thoughts?
Kevin
Thanks
0
 

Author Comment

by:kevin1000
ID: 40598885
Update:   I just tested the CTRL + ALT + END and it brought up the Task Manager for the workstations local side.  I need to get the users access to the Terminal Session Task Manager so they can end misbehaving programs.

Thoughts?
Kevin
0
Increase Agility with Enabled Toolchains

Connect your existing build, deployment, management, monitoring, and collaboration platforms. From Puppet to Chef, HipChat to Slack, ServiceNow to JIRA, Splunk to New Relic and beyond, hand off data between systems to engage the right people.

Connect with xMatters.

 
LVL 24

Expert Comment

by:VB ITS
ID: 40599975
Sorry Kevin, missed your first response. It definitely sounds like you have policies in place restricting users from launching the Task Manager.

I can tell you now that in a vanilla 2012 RDS install, the Task Manager can be launched by default by all users.
0
 

Author Comment

by:kevin1000
ID: 40608575
Thanks.

Any thoughts on what group policy would do that?  Cause it really was a standard installation.

Thanks
Kevin
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 500 total points
ID: 40611619
It's most likely an existing policy in your environment. You'll need to check what computer-level policies are applying to the RDS servers in the Group Policy Management Console itself.

Try running a RSoP query while logged into the 2012 RDS server and check Computer ConfigurationWindows SettingsSecurity Settings

I'm not too sure which exact GP setting would cause this though, I'll need to do some research on my end. I have a feeling it's something within the User Rights Assignment area.
0
 

Author Closing Comment

by:kevin1000
ID: 40880175
Sorry it took so long to accept the solution.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will review the basic installation and configuration for Windows Software Update Services (WSUS) in a Windows 2012 R2 environment.  WSUS is a Microsoft tool that allows administrators to manage and control updates to be approved and ins…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question