Do they need admin rights???

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Stephan - 21 Jun 2006 18:56 GMT

What is the minimum rights I need to give to my power users to be able to
select 'show processes from all users' check box in task manager without
giving them administrator rights to a windows 2000 server?

Do I have to give them administrator rights? Is there any other way? They
need to see all processes for troubleshouting purposes.

Thanks Stephan

Reply to this Message

Steven L Umbach - 22 Jun 2006 03:11 GMT

I believe they need to be a local administrator to view all processes for
all users with Task Manager but you don't want to do that. Try the free
Process Explorer from SysInternals as I believe that may do what you
nt. --- Steve

http://www.sysinternals.com/Utilities/ProcessExplorer.html -- Process
Explorer

> What is the minimum rights I need to give to my power users to be able to
> select 'show processes from all users' check box in task manager without
[quoted text clipped - 4 lines]
>
> Thanks Stephan

Reply to this Message

Joe Richards [MVP] - 22 Jun 2006 15:26 GMT

I believe you will find you need SE_DEBUG (aka SeDebugPrivilege aka
Debug Programs) to view detailed process info of processes not running
in your own security context. That is a pretty serious permission and
someone knowledgeable who has can escalate themselves.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net

---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

Reply to this Message