Disable Task Manager in Domain Controller Server

%3CLINGO-SUB%20id%3D%22lingo-sub-1193456%22%20slang%3D%22en-US%22%3EDisable%20Task%20Manager%20in%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1193456%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20our%20organization%2C%20our%20users%20are%20logged%20in%20through%20RDP%20in%20our%20terminal%20servers%2C%20since%20the%20organization%20installed%20an%20application%20to%20monitor%20their%20idle%20time%20in%20the%20application%2C%20since%20its%20an%20app%2C%20it%20can%20be%20modified%20using%20Task%20Manager%20they%20can%20use%20taskmngr%20to%20end%20process%20it%2C%20so%20that%20they%20cannot%20monitor%20their%20idle%20time.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20avoid%20that%2C%20I%20want%20to%20disable%20the%20task%20manager%20in%20all%20users%20in%20the%20domain%20except%20for%20us%20admins.%20I%20want%20to%20apply%20using%20GPO%20but%20it's%20not%20working.%20source%3A%3CBR%20%2F%3E%3CBR%20%2F%3Eshorturl.at%2FgtwAV%20-%26nbsp%3Bsocial.technet.microsoft%3CBR%20%2F%3Eshorturl.at%2FgzJOT%20-%26nbsp%3Bforums.tomshardware%3CBR%20%2F%3E%3CBR%20%2F%3EI'm%20using%20Windows%20Server%202012%20R2%20%26amp%3B%20Windows%20Server%202008%20R2.%20Is%20it%20possible%20to%20apply%20this%20setting%20even%20not%20using%20GPO%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Espacegabx%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1193456%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EManagement%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1193625%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Task%20Manager%20in%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1193625%22%20slang%3D%22en-US%22%3E%3CP%3ESomething%20here%20might%20help.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fie%2Fen-US%2F35dd3cd6-cc67-476f-82e2-058293e6f657%2Fhow-do-i-disable-task-manager-for-users-only%3Fforum%3DwinserverTS%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fie%2Fen-US%2F35dd3cd6-cc67-476f-82e2-058293e6f657%2Fhow-do-i-disable-task-manager-for-users-only%3Fforum%3DwinserverTS%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1194407%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Task%20Manager%20in%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1194407%22%20slang%3D%22en-US%22%3EHi%20Dave%2C%3CBR%20%2F%3E%3CBR%20%2F%3Ethe%20link%20you%20provided%20is%20I%20already%20look%20that%20and%20it%20includes%20here%20with%20the%20text%20link%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%22shorturl.at%2FgtwAV%20-%20social.technet.microsoft%22%3CBR%20%2F%3E%3CBR%20%2F%3EI%20follow%20there%20the%20instructions%2C%20but%20when%20I%20followed%20it%20I'm%20missing%20this%20configuration%20on%20my%20GPO.%20It%20doesn't%20exist.%3CBR%20%2F%3E%3CBR%20%2F%3E%22Configure%20Computer%20Configuration--%26gt%3BPolicies--%26gt%3BAdministrative%20Templates--%26gt%3BSystem--%26gt%3BGroup%20Policy--%26gt%3BUser%20Group%20Policy%20loopback%20processing%20mode--%26gt%3BEnable--%26gt%3BMode%3A%20Merge%3CBR%20%2F%3E%3CBR%20%2F%3E3.%20Filter%20Domain%20Admin%3A%20GPO--%26gt%3BDelegation%20tab--%26gt%3BAdvanced--%26gt%3BSelect%20Domain%20Admin%20Group--%26gt%3Bselect%20Deny%20Apply%20Group%20Policy%20checkbox%22%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1194444%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Task%20Manager%20in%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1194444%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20like%20the%20name%20is%20really%3CSTRONG%3E%3CSPAN%20style%3D%22text-align%3A%20left%3B%20color%3A%20%232a2a2a%3B%20text-transform%3A%20none%3B%20line-height%3A%20inherit%3B%20text-indent%3A%200px%3B%20letter-spacing%3A%20normal%3B%20font-family%3A%20inherit%3B%20font-size%3A%20inherit%3B%20font-style%3A%20inherit%3B%20font-variant%3A%20inherit%3B%20text-decoration%3A%20none%3B%20word-spacing%3A%200px%3B%20display%3A%20inline%20!important%3B%20list-style-type%3A%20none%3B%20white-space%3A%20normal%3B%20orphans%3A%202%3B%20font-size-adjust%3A%20none%3B%20font-stretch%3A%20inherit%3B%20float%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20background-color%3A%20%23ffffff%3B%22%3E%20Configure%20User%20Group%20Policy%20Loopback%20processing%20mode%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1196275%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Task%20Manager%20in%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1196275%22%20slang%3D%22en-US%22%3EHello%20Dave%2C%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20for%20this.%20I%20already%20found%20the%20configuration.%20But%20after%20I%20apply%20all%20the%20settings%20provided%2C%20It%20doesn't%20work.%20I%20logged%20in%20as%20a%20user%20and%20I%20can%20still%20access%20the%20task%20manager.%3CBR%20%2F%3E%3CBR%20%2F%3EScreenshot%20image%3A%20%3CA%20href%3D%22https%3A%2F%2Fimgur.com%2Fa%2FMYHdp4m%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fimgur.com%2Fa%2FMYHdp4m%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1196455%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20Task%20Manager%20in%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1196455%22%20slang%3D%22en-US%22%3EWhen%20I%20check%20the%20gpresult%2C%20it%20doesn't%20apply%20it%20said%20that%3A%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20following%20GPOs%20were%20not%20applied%20because%20they%20were%20filtered%20out%3CBR%20%2F%3E%3CBR%20%2F%3ERemove%20Task%20Manager%3CBR%20%2F%3EFiltering%3A%20Denied%20(Security)%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi all,

 

In our organization, our users are logged in through RDP in our terminal servers, since the organization installed an application to monitor their idle time in the application, since its an app, it can be modified using Task Manager they can use taskmngr to end process it, so that they cannot monitor their idle time. 

 

To avoid that, I want to disable the task manager in all users in the domain except for us admins. I want to apply using GPO but it's not working. source:

shorturl.at/gtwAV - social.technet.microsoft
shorturl.at/gzJOT - forums.tomshardware

I'm using Windows Server 2012 R2 & Windows Server 2008 R2. Is it possible to apply this setting even not using GPO? 

 

Thanks,

 

spacegabx

 

 

5 Replies
Highlighted
Hi Dave,

the link you provided is I already look that and it includes here with the text link:

"shorturl.at/gtwAV - social.technet.microsoft"

I follow there the instructions, but when I followed it I'm missing this configuration on my GPO. It doesn't exist.

"Configure Computer Configuration-->Policies-->Administrative Templates-->System-->Group Policy-->User Group Policy loopback processing mode-->Enable-->Mode: Merge

3. Filter Domain Admin: GPO-->Delegation tab-->Advanced-->Select Domain Admin Group-->select Deny Apply Group Policy checkbox"
Highlighted

Looks like the name is really Configure User Group Policy Loopback processing mode

 

 

Highlighted
Hello Dave,

Thanks for this. I already found the configuration. But after I apply all the settings provided, It doesn't work. I logged in as a user and I can still access the task manager.

Screenshot image: https://imgur.com/a/MYHdp4m
Highlighted
When I check the gpresult, it doesn't apply it said that:

The following GPOs were not applied because they were filtered out

Remove Task Manager
Filtering: Denied (Security)