I Want to Disable Task Manager on All Windows Server 2012 Client Computers

[viveknayyar007]

While working with an organization for which the security is a major concern, many times the administrators might not want the end-users to perform various tasks that might be harmful for the computer or the whole network infrastructure if anything goes bad.

When the Task Manager is disabled on all the client computers, the administrators can remain assured that those users would not be able to make inappropriate changes in the operating system, at least through the Task Manager.

Although the Task Manager can be easily disabled by going to each computer individually and accessing the group policy is of that particular system, this is a very time taking and tedious process and also it is not practical when it comes to configuring hundreds and thousands of computers.

Well, the above task can be done easily through Group Policy Management console.

Here is what you need to do in order to get the job:

■Log on to the Windows Server 2012 Active Directory domain controller with the Enterprise Admin for Domain Admin account.

■If not already started, initialize the Server Manager window by clicking its icon from the bottom left corner of the window in the taskbar.

■On the opened Server Manager window, from the top right corner, click Tools from the menu bar.

■On the displayed list, go to Group Policy Management.





■On the opened Group Policy Management console, from the left pane, expand Forest > Domains, and then expand the domain name. (MYDOMAIN.COM for this demonstration.).

■From the expanded list, right-click the domain name.

■From the displayed context menu, click the Create a GPO in this domain, and Link it here option.





■On the opened New GPO box, specify a self-explanatory name for the GPO in the Name field.

■From the Source Starter GPO drop-down list, choose a starter GPO of your choice if you have created any.





■Once done, click OK to create and link the new GPO to the target domain or OU.

■Once this is done, right-click the newly created GPO.

■From the displayed context menu, click Edit.





■On the opened Group Policy Object Editor snap-in, from the left pane, under the User Configuration section, go to Policies > Administrative Templates > System.

■From the expanded list, click to select Ctrl+Alt+Del Options container.

■Once selected, from the right pane, double-click the Remove Task Manager option.





■The opened Remove Task Manager box, click to select the Enabled radio button.





■Finally click OK to confirm the modifications.

■Close the Group Policy Object Editor snap-in.

■Press the Windows + R keys simultaneously to initialize the Run command box.

■In the available field in the Run command box, type the GPUPDATE /FORCE command and press Enter key in order to update the group policy settings.