Solved

Windows Server 2012 Standard Terminal Server Users Access to Task Manager

Posted on 2015-02-04
7
631 Views
Last Modified: 2015-07-13
We just recently implemented a new Windows Server 2012 Server that we use as a Terminal Server.  So I have users logging in to their RDP Sessions and all is good.  But when one of their programs causes an issue in the RDP session they don't have access to the Task Manager to end the problem program.  Is this something a Group Policy would fix?  I would like them to be able to only end their own programs.

Thanks
Kevin
0
Comment
Question by:kevin1000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 24

Expert Comment

by:VB ITS
ID: 40590766
Users should have access to the Task Manager by default unless you already have a policy in place which prevents them from being able to launch it. FYI users can use the Ctrl + Alt + End key combination to launch the Task Manager as this simulates the Ctrl + Alt + Delete key combination in a remote session.

As long as your users don't have Administrator rights on your 2012 RDS server then they won't be able to end anybody else's processes but their own.
0
 

Author Comment

by:kevin1000
ID: 40591448
I'm probably missing something but when I sit at a users workstation and start the Task Manager from the right-click on the taskbar I get the authentication screen where I have to put in my Admin username and password.  When a user put their login information in to that screen, they get "Login Failure.  User has not been granted the requested logon type at this computer."

Thoughts?
Kevin
Thanks
0
 

Author Comment

by:kevin1000
ID: 40598885
Update:   I just tested the CTRL + ALT + END and it brought up the Task Manager for the workstations local side.  I need to get the users access to the Terminal Session Task Manager so they can end misbehaving programs.

Thoughts?
Kevin
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 24

Expert Comment

by:VB ITS
ID: 40599975
Sorry Kevin, missed your first response. It definitely sounds like you have policies in place restricting users from launching the Task Manager.

I can tell you now that in a vanilla 2012 RDS install, the Task Manager can be launched by default by all users.
0
 

Author Comment

by:kevin1000
ID: 40608575
Thanks.

Any thoughts on what group policy would do that?  Cause it really was a standard installation.

Thanks
Kevin
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 500 total points
ID: 40611619
It's most likely an existing policy in your environment. You'll need to check what computer-level policies are applying to the RDS servers in the Group Policy Management Console itself.

Try running a RSoP query while logged into the 2012 RDS server and check Computer ConfigurationWindows SettingsSecurity Settings

I'm not too sure which exact GP setting would cause this though, I'll need to do some research on my end. I have a feeling it's something within the User Rights Assignment area.
0
 

Author Closing Comment

by:kevin1000
ID: 40880175
Sorry it took so long to accept the solution.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The article will show you how you can maintain a simple logfile of all Startup and Shutdown events on Windows servers and desktops with PowerShell. The script can be easily adapted into doing more like gracefully silencing/updating your monitoring s…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question