Admin can't kill off user's processes

From: Angie (anonymous_at_discussions.microsoft.com)
Date: 03/26/04 

Date: Fri, 26 Mar 2004 09:56:57 -0800

My goal is to have a server with the tighter security
template in place, but still allow the administrators to
kill off processes of other users -

Working on Server 2003. On a clean box, or one
configured with the setupSecurity.inf file, the
administartors group can kill off other user's processes
correctly.

As soon as you load the securedc.inf security template,
this is no longer possible. The admin receives 'Access
Denied'. Will not work through Task Manager or
taskkill.exe with the force switch.

I found out that the securews.inf security template does
not have this affect. I attepted to compare the secure
workstation and the secure domain controller policies,
but can't find anything that is a tell tale sign.

I would like to find out where this security setting is
taking place.

Relevant Pages

  • Re: compatws.inf (Security Template)
    ... primarily granted to three local groups: Administrators, ... Power Users, and Users. ... The Compatible template changes the ... information, see Default security settings. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: outloo security templates
    ... Make sure that when you administer the Outlook Security Settings folder that you do it with a profile that is not running in Cached Exchange mode. ... Administrators, Power Users, and Developers ... also be installed on the oulook verssion i have opened the template on. ...
    (microsoft.public.exchange.clients)
  • SUMMARY WAS: OT? Philosophical Question on SA responsibilities
    ... helpful for managers interested in hiring new administrators. ... Would you go thru the 14,600 messages in root and admin ... If I was a new SA I would if encountering a security hole, ... I can see some use for the passwd -s part of the crontab script, ...
    (SunManagers)
  • Re: Least User Priviledges for Network Administrators
    ... that group not be local administrators due to the nature of their work. ... in our Network Technology group are most likely, ... Trust how? ... desktop security practices and the installation of unlicensed software ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can we prevent IE exploits a priori?
    ... IE’s Local Machine Zone and the Attack of the TLAs ... As Thor Larholm pointed out to Drew Copley on July 3rd, the kill bit is ... This is the sort of security hardening for IE that Qwik Fix ...
    (Bugtraq)