Re: tasklist.exe security problem??

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 09/24/04

  • Next message: Marcus: "Re: tasklist.exe security problem??" 
    Date: Fri, 24 Sep 2004 14:49:12 -0500

    The only problems I am aware of if an program will not run is if the user does not
    have the proper user right such as debug in this case, lack of ntfs permissions,
    Software Restriction or Group Policy Restrictions, not being an administrator, or
    file/operating system corruption possibly due to a virus. If you want to dig deeper
    you could use the filemon and regmon tools from SysInternals to see what files and
    registry entries are being access when you use those tools. I would for instance run
    filemon just before I try to run taskkill and when it fails look in filemon's log for
    any pertinent entries where access has been denied and just to see what it does
    access. You could also temporarily enable auditing for failure for privilege use,
    object access, and process tracking on the server and then look in the security log
    for failed events which may give you a clue. --- Steve

    http://www.sysinternals.com/ntw2k/source/filemon.shtml

    "Marcus" <bafi@linux.nu> wrote in message news:41546138.4C3D387F@linux.nu...
    > Hi Steve,
    > I tried with copying tasklist from another computer on which it is working and it
    > is the
    > same problem. I tried also tasklist from XP machine. The same error: Access denied.
    > Maybe tasklist need some service which is stoped or deactivated. Do you know about
    > such
    > dependencies?
    > I will write soon.
    >
    > Marcus
    >
    > Steven L Umbach wrote:
    >
    >> I can't think of much else other than to be absolutely sure you are logged on as
    >> an
    >> administrator by viewing the membership of the local administrators group and then
    >> checking that system and administrators have full control for administrators and
    >> system to the system folders and subfolders. If this is new behavior be sure to
    >> run a
    >> full virus scan on your computer. It might be interesting to see what happens if
    >> you
    >> copy tasklist from a computer it works on into a folder not in the path on the
    >> problem computer to see if it executes from there. --- Steve
    >>
    >> "Marcus" <marcusbb@swipnet.se> wrote in message
    >> news:Oo%23CuKgoEHA.1776@TK2MSFTNGP14.phx.gbl...
    >> > Steven L Umbach wrote:
    >> >
    >> >> Check to see if the administrators group has the user right to debug programs
    >> >> in
    >> >> the appropriate security policy. For instance check Local Security Policy under
    >> >> security settings/local policies/user rights.
    >> > Yes, I checked now. Adminstrators have rights to debug
    >> > For Windows 2000 it would need to show as the
    >> >> "effective" settings. Certain utilities need this right. Other than that check
    >> >> the
    >> >> ntfs permissions on the executables. Software Restriction Policies in Windows
    >> >> 2003
    >> >> can also prevent a program from running but the user is usually told that the
    >> >> application is restricted. --- Steve
    >> >
    >> >
    >> > Software Restriction Policies are not defined
    >> >
    >> > What it could be???
    >> >
    >> > MArcus
    >> >
    >> >
    >> >
    >> >
    >> >>
    >> >>
    >> >> "Marcus" <bafi@linux.nu> wrote in message news:4151D7E8.3EE5B828@linux.nu...
    >> >>
    >> >>>I can not run tasklist.exe on my server. It does not
    >> >>>matter if I log in as administrator locally or as domain administrator.
    >> >>> I am geting always the same message:
    >> >>>Error: Access denied
    >> >>>
    >> >>>The same problem with taskkill.exe
    >> >>>
    >> >>>It is hapen only on one server in the domain, on the rest tasklist.exe
    >> >>>is working without problems.
    >> >>>
    >> >>>Please help. Is this have to do with the Security
    >> >>>
    >> >>>Marcus
    >> >>>
    >> >>>
    >> >>>
    >> >>
    >> >>
    >

  • Next message: Marcus: "Re: tasklist.exe security problem??"

    Relevant Pages

    • Re: Administrator Privileges
      ... Steve O. wrote: ... Make sure you are a member of the local administrators group... ... Windows XP Home Edition or Windows XP Professional Edition (or superset - ...
      (microsoft.public.windowsxp.setup_deployment)
    • Re: I thought I was the administrator!
      ... Thanks, Steve. ... such programs can do that and will also restrict the administrator account ... on user accounts including administrators. ... Running the secedit command as ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Allow ONLY Domain Admin to login to XP
      ... Again the only way you can do that is by modifying the user rights for logon ... administrators then only users/groups in the local administrators group on ... --- Steve ... I just want domain users to be prevented from logging into a certain XP ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Messenger Service.
      ... or you could configure the ntfs permissions on the net comand so ... administrators on their own machines. ... group policy so that the net command is a disallowed application. ... > Steve. ...
      (microsoft.public.win2000.security)
    • Re: Login script to add a user as an Administrator.
      ... I hope that's not what Steve is asking for. ... just add Authenticated Users to every machine's Administrators ... Adding each user separately in a Startup Script is very simple (just need ... the local admin group, then you put the users in this group. ...
      (microsoft.public.scripting.wsh)