How to disable Task Manager

Page 1 of 2 12 LastLast

  1. Posts : 25
    Windows 7
       #1

    How to disable Task Manager


    Hi can anybody help me?
    I want to disable a standard user from accessing the task manager (I already know this can be done via the registry and gpedit.msc) but also I dont want to disable the administrators access to the task manager at the same time.

    If I disable the task manager via the registry or gpedit.msc it seems to block access by the admin account to.

    Any help would be very much appreciated!
      My Computer


  2. Posts : 1,377
    Win7x64
       #2

    Local policy affects all accounts.

    Out of curiosity, why do you want to do this? Limited (non-admin) accounts are already - by definition - prevented from doing things which require admin rights. Also, you somehow hobble the Task Manager, that doesn't by itself prevent them from doing the same thing they would have done in TM in other ways.
      My Computer


  3. Posts : 2,111
    Win7 Build 7600 x86
       #3

    Bladeforce said:
    Hi can anybody help me?
    I want to disable a standard user from accessing the task manager (I already know this can be done via the registry and gpedit.msc) but also I dont want to disable the administrators access to the task manager at the same time.

    If I disable the task manager via the registry or gpedit.msc it seems to block access by the admin account to.

    Any help would be very much appreciated!
    Hi Bladeforce,

    Taskmgr.exe is by default set to read/read & execute for users.

    There are two ways to disable it for users.

    1. Edit the permissions for the users, uncheck the read and read & execute permissions.

    2. Or remove the users from the security list.

    I recommend the first.

    It's not as straight forward as it seems, because for this file, users inherit permissions, and therefore can not be altered without a few steps.

    a. Go to C:\Windows\System32\taskmgr.exe,
    b. right click on the file,
    c. chose properties,
    d. go to the security tab
    e. click on advanced,
    f. click on edit permissions
    g. in the warning click ok
    h. click on users
    i. uncheck the inherit permissions..... button
    j. in the next dialog click on add (not delete)
    k. click a few time ok until you are back in the security tab
    l. Now you can click the edit button and edit the permissions of the users.
    m. Uncheck the two permission boxes.

    That's it.
      My Computer


  4. Posts : 25
    Windows 7
    Thread Starter
       #4

    Thanks for the replies. Firstly I'd like to do it because I just want the user to not have access to the task manager. i have set up the standard account and it gives full access to this users task manager with the ability to shut down programs. A little silly security wise.

    @squonksc thanks mate one problem though when i uncheck the 2 permission boxes and apply I get this "unable to save permission changes, Access is denied" error :/
      My Computer


  5. Posts : 31,242
    Windows 11 Pro x64 [Latest Release and Release Preview]
       #5

    try taking ownership of the ,exe first. looks lika a UAC dual token issue :)

    edit have just checked and the owner is trustedInstaller so it may need the full administrator account to allocate owner
      My Computers


  6. Posts : 5,642
    Windows 10 Pro (x64)
       #6

    I would recommend not to remove access to task manager. How would the user force shutdown a rouge application? Giving the user the means to shutdown applications of there own is not a security threat. As a standard user they would only be given permission to terminate processes governed by there user account ONLY.
      My Computer


  7. Posts : 1,377
    Win7x64
       #7

    Bladeforce said:
    Thanks for the replies. Firstly I'd like to do it because I just want the user to not have access to the task manager. i have set up the standard account and it gives full access to this users task manager with the ability to shut down programs. A little silly security wise.

    @squonksc thanks mate one problem though when i uncheck the 2 permission boxes and apply I get this "unable to save permission changes, Access is denied" error :/
    Preventing access to the TM does nothing to prevent users from using other utilities to kill those processes to which they've got access. It only hampers the uninformed. That may or may not be enough for your purposes, but it wouldn't be considered an adequate solution in a secure environment.
      My Computer


  8. Posts : 1,377
    Win7x64
       #8

    logicearth said:
    I would recommend not to remove access to task manager. How would the user force shutdown a rouge application? Giving the user the means to shutdown applications of there own is not a security threat. As a standard user they would only be given permission to terminate processes governed by there user account ONLY.
    What he said.
      My Computer


  9. Posts : 2,111
    Win7 Build 7600 x86
       #9

    Bladeforce said:
    Thanks for the replies. Firstly I'd like to do it because I just want the user to not have access to the task manager. i have set up the standard account and it gives full access to this users task manager with the ability to shut down programs. A little silly security wise.

    @squonksc thanks mate one problem though when i uncheck the 2 permission boxes and apply I get this "unable to save permission changes, Access is denied" error :/
    I hope you are trying to edit it from within an admin account.

    You can't lay down restrictions for users from the user account it self.

    If you did try it from within your own account, you might want to add your own username to the taksmgr.exe security list. (with full perms)

    By default "system", "administrators" and "users" are there.

    If it still doesn't work get back to me, we will go through it step by step.

    greetz.
      My Computer


  10. Posts : 2,111
    Win7 Build 7600 x86
       #10

    Oh, by the way,

    I concur with the comments made by my collegues.

    I wouldn't want to disable taskmanager for users for reasons already mentioned.

    Taskmanager doesn't give a user the power to change anything, it just gives them the ability to shoot down hung apps.

    Greetz
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:47.
Find Us