RE: Preventing users from ending a specific process (WinXP)

2009-08-18 Thread Sam Cayze
illip Partipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, August 18, 2009 10:51 AM To: NT System Admin Issues Subject: Re: Preventing users from ending a specific process (WinXP)

RE: Preventing users from ending a specific process (WinXP)

2009-08-18 Thread Phillip Partipilo
ipilo Parametric Solutions Inc. Jupiter, Florida (561) 747-6107 _ From: James Rankin [mailto:kz2...@googlemail.com] Sent: Tuesday, August 18, 2009 10:51 AM To: NT System Admin Issues Subject: Re: Preventing users from ending a specific process (WinXP) Can they kill the process if an

Re: Preventing users from ending a specific process (WinXP)

2009-08-18 Thread Ben Scott
On Tue, Aug 18, 2009 at 10:50 AM, James Rankin wrote: > Can they kill the process if another user account started it (especially one > higher up the food chain)? By default, regular users cannot kill processes owned by other users; admins can kill any process. You could probabbly apply an ACL

Re: Preventing users from ending a specific process (WinXP)

2009-08-18 Thread James Rankin
Can they kill the process if another user account started it (especially one higher up the food chain)? I am pretty sure you can set ACLs on a process basis too. Block access to the command prompt and Task Manager via GPO. Take away admin rights. If they need Task Manager, block their access to ot

RE: Preventing users from ending a specific process (WinXP)

2009-08-18 Thread David Lum
ke to close all the ones I can) and many (all?) VNC's have security issues. If it's not running, it's less vulnerable. Dave From: James Hill [mailto:james.h...@superamart.com.au] Sent: Monday, August 17, 2009 5:20 PM To: NT System Admin Issues Subject: RE: Preventing users from en

Re: Preventing users from ending a specific process (WinXP)

2009-08-17 Thread Angus Scott-Fleming
On 18 Aug 2009 at 10:19, James Hill wrote: > You could write a script to restart the service then you can > connect. I have the VNC service set to restart itself if it dies. I just tested it here and the uvnc_server service restarts itself when I kill it from taskmgr. However, if yo

RE: Preventing users from ending a specific process (WinXP)

2009-08-17 Thread Ken Schaefer
l.com [mailto:asbz...@gmail.com] Sent: Tuesday, 18 August 2009 7:47 AM To: NT System Admin Issues Subject: Re: Preventing users from ending a specific process (WinXP) I'm going to say "no" If they have enough rights to kill *some* processes, they'll be able to kill almost all

RE: Preventing users from ending a specific process (WinXP)

2009-08-17 Thread Brian Desmond
t: Re: Preventing users from ending a specific process (WinXP) Thanks Brian, We have users who are killing the vnc process in task manager which is preventing management from viewing the users screens. The reason why they need to be able to manually kill some processes, is due to the installed accou

RE: Preventing users from ending a specific process (WinXP)

2009-08-17 Thread James Hill
ed it when we wanted to remote control the machine. From: Robert Smith [mailto:exch...@gmail.com] Sent: Tuesday, 18 August 2009 9:59 AM To: NT System Admin Issues Subject: Re: Preventing users from ending a specific process (WinXP) Thanks Brian, We have users who are killing the vnc process in t

Re: Preventing users from ending a specific process (WinXP)

2009-08-17 Thread Ben Scott
On Mon, Aug 17, 2009 at 7:59 PM, Robert Smith wrote: > We have users who are killing the vnc process in task manager which is > preventing management from viewing the users screens. Fire them. Actually, just firing one or two should do the trick. Most of the rest should see the writing on t

Re: Preventing users from ending a specific process (WinXP)

2009-08-17 Thread Robert Smith
Thanks Brian, We have users who are killing the vnc process in task manager which is preventing management from viewing the users screens. The reason why they need to be able to manually kill some processes, is due to the installed accounting software that crashes quite often. Thanks, Bob On M

Re: Preventing users from ending a specific process (WinXP)

2009-08-17 Thread asbzone
I'm going to say "no" If they have enough rights to kill *some* processes, they'll be able to kill almost all of them. There will be a few that the OS protects specially, but everything else will be fair game. (And I have to remember if the OS protects anything under XP) Sent from my Verizo

RE: Preventing users from ending a specific process (WinXP)

2009-08-17 Thread Brian Desmond
You can applies ACLs to processes so, sure. Without some context though that's about all I can offer... Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian From