+1 They can't kill a process that isn't running. If they kill it after you manually start it, Ben Scott's recommendation should suffice.
I prefer not to have VNC running all the time as it shows as an open port on a network scan (I particularly hate seeing open ports, so I like to close all the ones I can) and many (all?) VNC's have security issues. If it's not running, it's less vulnerable. Dave From: James Hill [mailto:james.h...@superamart.com.au] Sent: Monday, August 17, 2009 5:20 PM To: NT System Admin Issues Subject: RE: Preventing users from ending a specific process (WinXP) You could write a script to restart the service then you can connect. In a previous life we actually left the service stopped so there was no tray icon (can't remember what mix of vnc it was but it didn't have a "no tray icon" option from memory) and then just remotely started it when we wanted to remote control the machine. From: Robert Smith [mailto:exch...@gmail.com] Sent: Tuesday, 18 August 2009 9:59 AM To: NT System Admin Issues Subject: Re: Preventing users from ending a specific process (WinXP) Thanks Brian, We have users who are killing the vnc process in task manager which is preventing management from viewing the users screens. The reason why they need to be able to manually kill some processes, is due to the installed accounting software that crashes quite often. Thanks, Bob On Mon, Aug 17, 2009 at 4:39 PM, Brian Desmond <br...@briandesmond.com<mailto:br...@briandesmond.com>> wrote: You can applies ACLs to processes so, sure. Without some context though that's about all I can offer... Thanks, Brian Desmond br...@briandesmond.com<mailto:br...@briandesmond.com> c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From: Robert Smith [mailto:exch...@gmail.com<mailto:exch...@gmail.com>] Sent: Monday, August 17, 2009 5:29 PM To: NT System Admin Issues Subject: Preventing users from ending a specific process (WinXP) Is it possible to prevent users from ending a particular process on a WinXP SP2 workstation. The catch to this is that they need to be able to end other processes in the event of an app locking up. Thanks, Bob ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
