Hi,

Server : Windows 2003 Standard Edition

can I disable task manager for non-administrator ?
if i go to gpedit.msc and tick disable task manager,
even the users in admin group are not allow to use task manager..
is it possible just to disable task manager for non-administrators ?
Thanks

Steven

Normally Local Group Policy applies to all users that logon to the computer.
If this is a domain computer, you should configure that at the domain level.
Otherwise change the ntfs permissions for the executable taskmgr.exe so that
only admins can run it. That may not stop a malicious user from trying to
install a copy to a different place on the computer, but should work if the
users are considered trustworthy. A more secure method would be to use
Software Restriction Policy and create hash rules for executables that you
do not want normal users to run and configure the enforcement rule to not
apply to local administrators. You can access SRP via Local Security Policy
[secpol.msc]. --- Steve

http://www.microsoft.com/technet/pro.../rstrplcy.mspx

"Steven Wong" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi,
>
> Server : Windows 2003 Standard Edition
>
> can I disable task manager for non-administrator ?
> if i go to gpedit.msc and tick disable task manager,
> even the users in admin group are not allow to use task manager..
> is it possible just to disable task manager for non-administrators ?
> Thanks
>
> Steven
>
>

thanks steve, the 1st method works great for me.
My TS users won't see the desktop because they will start the
only application they need to use once logged in.
I just want to prevent them to press ctrl-alt-end and run explorer in task
manager
within a TS session.
Thanks for your help.

Steven

Cool. Glad something worked and thanks for reporting back. --- Steve


"Steven Wong" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> thanks steve, the 1st method works great for me.
> My TS users won't see the desktop because they will start the
> only application they need to use once logged in.
> I just want to prevent them to press ctrl-alt-end and run explorer in task
> manager
> within a TS session.
> Thanks for your help.
>
> Steven
>
>