TaskManager

[DasFox]

I'm trying to figure how to disable the TaskManager, File, "New Task Run"

http://img141.imageshack.us/my.php?image=screen7fa.jpg

And how can I remove the "Shutdown" tab:

http://img161.imageshack.us/my.php?image=screen19wn.jpg

Can I disable these settings for it in the Group Policy Editor?


THANKS

 

[Nothinman]

Yea, I think if you disable the Run menu in GP it'll disable it in both places. If that works, I would assume Shutdown works the same.

 

[DasFox]

Well I don't see anything for the task manager in the Group Policy, except to just stop it.

 

[DasFox]

bump anyone else?

 

[Rilex]

Like Nothinman said, disable the Run line and the user's ability to perform a shutdown/restart/etc.

 

[DasFox]

Well here it is, in the Group Policy Editor, unless there is something else, but it doesn't remove it from the start menu.

http://img159.imageshack.us/my.php?image=screen6fg.jpg

Sheesh

 

[mechBgon]

Originally posted by: DasFox
Well here it is, in the Group Policy Editor, unless there is something else, but it doesn't remove it from the start menu.

http://img159.imageshack.us/my.php?image=screen6fg.jpg

Sheesh

Log on as someone besides Administrator and check now.

 

[DasFox]

Originally posted by: mechBgon

Originally posted by: DasFox
Well here it is, in the Group Policy Editor, unless there is something else, but it doesn't remove it from the start menu.

http://img159.imageshack.us/my.php?image=screen6fg.jpg

Sheesh

Log on as someone besides Administrator and check now.

There is only a Admin account and it needs to stay this way, because it is how the box runs with a client program for a gaming cafe I work at.

The cafe program needs Admin rights to run, so changing to another account won't help anything, this needs to work as a Admin and it should work this way, because under the Admin account you can have other things removed and not working and see them in the Admin account so I don't see where this would be anything different, UNLESS this one thing was done different for the Admin account by Microsoft I don't really know.

THANKS

 

[mechBgon]

On my system, it does affect even "the" Administrator account. Is this happening on every system, have you tried it on another one?

Also, there are ways of making just one program run with Admin credentials while based out of a Limited account, if you want to. On WinXP Pro, anyway.

One other thought. Is the original Administrator account the only Admin-class account on the system, period? If so, try creating another one. On my system, I have Administrator, Superuser, User, and Visitors, with SU being an Admin-class account that I use when necessary. Maybe Microsoft's trying to keep you from painting yourself into a corner.

 

[BehindEnemyLines]

Maybe you can run the program in a non-administrative account (accounts with no administrative rights) by using the "Run as..." command. Right-click on a program and choose "Run as...", then select "The following user" and use an account with administrative rights. You can then create a shortcut with the proper credentials entered in the Shortcut tab > Advanced. There's a problem though, it's because Windows always ask for a password when double-clicking the shortcut. Never tried this feature, but it might worth a try.

 

[stash]

There is only a Admin account and it needs to stay this way, because it is how the box runs with a client program for a gaming cafe I work at.

Trying to restrict an administrator from doing things on the computer is pointless. Anything you do can be undone by an admin.

 

[DasFox]

From what I can tell from a few of the internet/gaming cafe programs I have played with, they need to run on the server and clients under the Admin account.

ALOHA

 

[stash]

So why are you trying to restrict admins?

 

[dclive]

Originally posted by: stash

There is only a Admin account and it needs to stay this way, because it is how the box runs with a client program for a gaming cafe I work at.

Trying to restrict an administrator from doing things on the computer is pointless. Anything you do can be undone by an admin.

Security through obscurity. There's nothing like it.

 

[ProviaFan]

Originally posted by: stash
So why are you trying to restrict admins?

Exactly. It's pointless. The only way to make this not quite the nightmare it would be otherwise would be to use one of those hardware-based OS restoration cards that refreshes the OS to an original image after each reboot.

 

[imported_Questar]

First step would probably be to get off XP Home.

Now, setup an account that has the needed privledges to run the application (and it's NOT the Adminstrator account).

Now run the application as that user (there are various ways to do this).

 

[DasFox]

I didn't saying anything about trying to restrict admins, I said these internet cafe software apps need to run under a Admin account, which I think is foolish, I'm trying to find one in the meantime that can run under a "Guest" account, then half the nightmare will be over.

Also no one said anything either about these boxes being XP Home, we're using Pro.

ALOHA

 

[GeekDrew]

Originally posted by: DasFox
I didn't saying anything about trying to restrict admins, I said these internet cafe software apps need to run under a Admin account, which I think is foolish, I'm trying to find one in the meantime that can run under a "Guest" account, then half the nightmare will be over.

Also no one said anything either about these boxes being XP Home, we're using Pro.

ALOHA

What software apps are they, and have you tried running them as a guest using elevated [admin] rights for only that program, if necessary?

 

[DasFox]

Ok, well we put SmartLaunch back in, and from what I gather we need to run it under a Admin account which will be simpler, and it does have some security features, so it doesn't look like it will present any problems running like this.

So I'll just wait and see how it goes like this.

THANKS