Admin can't kill off user's processes

From: Angie (anonymous_at_discussions.microsoft.com)
Date: 03/29/04

  • Next message: Diana Smith [MSFT]: "Re: Domain controller Security Policy" 
    Date: Mon, 29 Mar 2004 10:02:51 -0800

    Found out that Debug Programs in the right required to do
    this.

    Now my question is - how do I let a power user see
    proccesses of all users in order to kill them off? The
    check box in Task Mgr is grayed out.

    >-----Original Message-----
    >My goal is to have a server with the tighter security
    >template in place, but still allow the administrators to
    >kill off processes of other users -
    >
    >Working on Server 2003. On a clean box, or one
    >configured with the setupSecurity.inf file, the
    >administartors group can kill off other user's processes
    >correctly.
    >
    >As soon as you load the securedc.inf security template,
    >this is no longer possible. The admin receives 'Access
    >Denied'. Will not work through Task Manager or
    >taskkill.exe with the force switch.
    >
    >I found out that the securews.inf security template does
    >not have this affect. I attepted to compare the secure
    >workstation and the secure domain controller policies,
    >but can't find anything that is a tell tale sign.
    >
    >I would like to find out where this security setting is
    >taking place.
    >
    >
    >.
    >

  • Next message: Diana Smith [MSFT]: "Re: Domain controller Security Policy"