Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to disable Task Manager


30 Sep 2009   #1

Windows 7
 
 
How to disable Task Manager

Hi can anybody help me?
I want to disable a standard user from accessing the task manager (I already know this can be done via the registry and gpedit.msc) but also I dont want to disable the administrators access to the task manager at the same time.

If I disable the task manager via the registry or gpedit.msc it seems to block access by the admin account to.

Any help would be very much appreciated!

My System SpecsSystem Spec
.

30 Sep 2009   #2

Win7x64
 
 

Local policy affects all accounts.

Out of curiosity, why do you want to do this? Limited (non-admin) accounts are already - by definition - prevented from doing things which require admin rights. Also, you somehow hobble the Task Manager, that doesn't by itself prevent them from doing the same thing they would have done in TM in other ways.
My System SpecsSystem Spec
30 Sep 2009   #3

Win7 Build 7600 x86
 
 

Quote   Quote: Originally Posted by Bladeforce View Post
Hi can anybody help me?
I want to disable a standard user from accessing the task manager (I already know this can be done via the registry and gpedit.msc) but also I dont want to disable the administrators access to the task manager at the same time.

If I disable the task manager via the registry or gpedit.msc it seems to block access by the admin account to.

Any help would be very much appreciated!
Hi Bladeforce,

Taskmgr.exe is by default set to read/read & execute for users.

There are two ways to disable it for users.

1. Edit the permissions for the users, uncheck the read and read & execute permissions.

2. Or remove the users from the security list.

I recommend the first.

It's not as straight forward as it seems, because for this file, users inherit permissions, and therefore can not be altered without a few steps.

a. Go to C:\Windows\System32\taskmgr.exe,
b. right click on the file,
c. chose properties,
d. go to the security tab
e. click on advanced,
f. click on edit permissions
g. in the warning click ok
h. click on users
i. uncheck the inherit permissions..... button
j. in the next dialog click on add (not delete)
k. click a few time ok until you are back in the security tab
l. Now you can click the edit button and edit the permissions of the users.
m. Uncheck the two permission boxes.

That's it.
My System SpecsSystem Spec
.


30 Sep 2009   #4

Windows 7
 
 

Thanks for the replies. Firstly I'd like to do it because I just want the user to not have access to the task manager. i have set up the standard account and it gives full access to this users task manager with the ability to shut down programs. A little silly security wise.

@squonksc thanks mate one problem though when i uncheck the 2 permission boxes and apply I get this "unable to save permission changes, Access is denied" error :/
My System SpecsSystem Spec
30 Sep 2009   #5

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

try taking ownership of the ,exe first. looks lika a UAC dual token issue

edit have just checked and the owner is trustedInstaller so it may need the full administrator account to allocate owner
My System SpecsSystem Spec
30 Sep 2009   #6

Windows 8.1 Pro (x64)
 
 

I would recommend not to remove access to task manager. How would the user force shutdown a rouge application? Giving the user the means to shutdown applications of there own is not a security threat. As a standard user they would only be given permission to terminate processes governed by there user account ONLY.
My System SpecsSystem Spec
30 Sep 2009   #7

Win7x64
 
 

Quote   Quote: Originally Posted by Bladeforce View Post
Thanks for the replies. Firstly I'd like to do it because I just want the user to not have access to the task manager. i have set up the standard account and it gives full access to this users task manager with the ability to shut down programs. A little silly security wise.

@squonksc thanks mate one problem though when i uncheck the 2 permission boxes and apply I get this "unable to save permission changes, Access is denied" error :/
Preventing access to the TM does nothing to prevent users from using other utilities to kill those processes to which they've got access. It only hampers the uninformed. That may or may not be enough for your purposes, but it wouldn't be considered an adequate solution in a secure environment.
My System SpecsSystem Spec
30 Sep 2009   #8

Win7x64
 
 

Quote   Quote: Originally Posted by logicearth View Post
I would recommend not to remove access to task manager. How would the user force shutdown a rouge application? Giving the user the means to shutdown applications of there own is not a security threat. As a standard user they would only be given permission to terminate processes governed by there user account ONLY.
What he said.
My System SpecsSystem Spec
01 Oct 2009   #9

Win7 Build 7600 x86
 
 

Quote   Quote: Originally Posted by Bladeforce View Post
Thanks for the replies. Firstly I'd like to do it because I just want the user to not have access to the task manager. i have set up the standard account and it gives full access to this users task manager with the ability to shut down programs. A little silly security wise.

@squonksc thanks mate one problem though when i uncheck the 2 permission boxes and apply I get this "unable to save permission changes, Access is denied" error :/
I hope you are trying to edit it from within an admin account.

You can't lay down restrictions for users from the user account it self.

If you did try it from within your own account, you might want to add your own username to the taksmgr.exe security list. (with full perms)

By default "system", "administrators" and "users" are there.

If it still doesn't work get back to me, we will go through it step by step.

greetz.
My System SpecsSystem Spec
01 Oct 2009   #10

Win7 Build 7600 x86
 
 

Oh, by the way,

I concur with the comments made by my collegues.

I wouldn't want to disable taskmanager for users for reasons already mentioned.

Taskmanager doesn't give a user the power to change anything, it just gives them the ability to shoot down hung apps.

Greetz
My System SpecsSystem Spec
Reply

 How to disable Task Manager




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:31 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33