Users tab in Task Manager on Windows 2003

From: Arild Bakken (arildb__at_hotmail.com)
Date: 11/10/05

  • Next message: Alberto Brivio: "No more printing" 
    Date: Thu, 10 Nov 2005 12:28:39 +0100

    Hi,

    I work for a company that runs a terminal server environment in a shared
    hosting environment. We have many customers and many of these share servers.
    For a long time we've been running on Windows 2000 but lately we've been
    adding Windows 2003 servers to our environment. This poses a problem for us
    as the "Task Manager" in windows 2003 has a "Users" tab that displays a list
    of users connected to the server. Since the users connected may be from
    different customers we do not want them to "see" each other. For regular
    users this is not a problem as they only see one user in the list,
    themselves, but certain users at the customers need the ability to do a
    "Remote control" / "Shadow" of their own users in order to help them out
    with simple stuff. In order to do that they need more rights on the RDP /
    ICA protocols in Terminal Services than just the "Logon" privilege.

    One thing they need in order to shadow users is to see who is logged on a
    server, and so we give them the "Query Information" privilege, and giving
    them that enables them to see all logged on users through "Task Manager /
    Users" regardless of which customer the user belongs to. Now, since Terminal
    Services does not allow for a more finegrained permissionset we only see the
    following options:

    1. Find a way to remove the "Users" tab from Task Manager.

    2. Disable Task Manager using GPO and write our own tool like Task Manager
    so that the users can end their tasks when processes hang.

    Now, of course we'd like to stick with the built-in Task Manager as it's
    hooked up with the windows system keys (Ctrl-Alt-Del and Ctrl-F1 in Citrix)
    so option 2 really isn't a good option.

    Any tips on option 1, or any other helpful tips are very welcome.

    Regards,

    Arild Bakken

  • Next message: Alberto Brivio: "No more printing"

    Relevant Pages

    • Re: Security in a hosted facility
      ... I work in that environment. ... We monitor access to the server, ... things that the customers might put on the server. ... The customer is responsible for the security of his ftp password, ...
      (Security-Basics)
    • where to place isa 2006
      ... I have to build a hyper-v server on which we are going to host several customers. ... I am also hosting one exchange server and 2 domaincontrollers for a small hosted exchange environment. ...
      (microsoft.public.isa)
    • Re: outlook on server
      ... I make sure my customers understand up front that they are not ... using the server as a workstation is simply out of the question. ... > I have a client I've had for years now who wouldn't do any maintenance. ...
      (microsoft.public.windows.server.sbs)
    • Re: Remobjects v KBM
      ... >> client query components) follow from that. ... Then, connections can be created to say SQL Server, Oracle, Interbase and ... can then be created from the abstract dataset definition in 'customers' to ... implicitly - this makes your code not be database connection specific). ...
      (borland.public.delphi.thirdpartytools.general)
    • Re: Inoperative CAD keys
      ... Have you visited Windows Update recently; do you have WinXP SP2 installed? ... These groups are hosted on the Microsoft public news server, ... >> "Have you run anti-malware programs recently? ... then choose Task Manager from the context menu. ...
      (microsoft.public.windowsxp.newusers)
    • Quantcast