Need solution, pranksters logging off other users

[iconSYS1]

I am wondering if there is a solution for this. I have 3 offices worldwide all logging into Citrix on a windows 2003 server, all users need access to task manager in order to close non-responsive programs on their own. Lately some users have found out that they also have access to log off other users. I have tried this from a non-administrator client computer and found access denied when trying to "disconnect" a user, but they have access to "logoff" another user. Anyone know how to block access to this for non-administrators?

 

[ascotta]

i dont think you cab do that

[blue] Oh you know, just doing what I do.[/blue]

Cheers
Scott

 

[iconSYS1]

Can I get a second opinion? I can fully disable users access to the task manager using GPMC .. but that creates a new problem with users calling me all day asking to kill non-responsive programs. (in my company I have a couple buggy programs since we are beta testing proprietary software) If these we disgruntled employees as opposed to just practical jokers.. I could be facing serious problems. Which is the senerio I am trying to avoid. Any help would be appreciated.

 

[Chambers]

How about setting a NTFS security on taskman.exe and only allowing the people you need to open it access to it?