Disable Task Manager--> Do you and why?

[oxide54]

Why do you disable task manager?

 

Add reasons. I'll start.

 

1. To prevent tampering with edulock

[Quackers]

No , its a handy place for users to be able to get when a program starts hanging.

[oxide54]

No , its a handy place for users to be able to get when a program starts hanging.

 

i know, thats my thiinking i'm wondering whether we are just disabling for the sake of it

[MatthewL]

There is no benefit to removing access to it if you remote it from CTRL ALT DEL you can just create a desktop shortcut to it. As a standard user they cannot end anything apart from what they have running. Too handy and users that we have moved over complain all the time about not been able to access it to the point where I re-enabled it (wasn't my decision to remove it in first place)

[oxide54]

desktop shortcut doesn't work if GPO disables it does it?

[MatthewL]

Yeah it would appear so as its what we do to get around it with our users.

[glennda]

What i say on a post the other day was swap taskmanager file with something different. Windows then blocks when trying to launch and you can rename it and launch it that way.

 

No idea if it works or not - the old advantage to blocking it i can see is the run command (which as long as share perms are ok shouldn't make a difference) and being able to log people off if its a terminal server.

[MatthewL]

Just booted up my VM test bed and create a GPO and have disabled task manager and create a shortcut but when run it says its disabled but yet when I run as like we do at work it does work.

[oxide54]

Just booted up my VM test bed and create a GPO and have disabled task manager and create a shortcut but when run it says its disabled but yet when I run as like we do at work it does work.

 

is work and lab different versions of server? or different domain functional levels?

[MatthewL]

Both the same. 2003 R2.

[oxide54]

does it apply to administrators ? cause i just set it and gpupdated ? and i still have task manager.

 

I'm logged into a domain controller (my laptop) as administrator though

[MatthewL]

I create a policy for users and created a user and logged into a XP VM which is joined to the domain and it worked. Only got it apply to for example domain users not admins.

[oxide54]

I create a policy for users and created a user and logged into a XP VM which is joined to the domain and it worked. Only got it apply to for example domain users not admins.

 

looks like my gpupdate was too soon. probably changed it on one domain controller and gpupdate from the other ! they hadn't replicated yet as i did it 3 seconds after changing the policy in gpmc.

 

i hae just right clicked my taskbar and task manager is indeed disabled

 

copying the exe to a different still doesn't work it is still disabled

[pete]

No - it's far too handy for a) diagnosis while still logged in as the end-user b) killing misbehaving software as an end-user