Windows Server Task Manager Access

Question

Hi,

I have to give access of of only task manager of Windows Server to TL/Head so that they can monitor users. Is there any way out so that I can give access to Non-Admin i.e. Domain Users access of only task manager of Windows Server by any means say Powershell / Tool or likewise.

Please help!

Answer 1

I was just trying to verify that when you say "logged in", that you were referring to users who have a remote desktop session on your server as opposed to mapping a network drive to the server.

I did not see anything in the group policy documentation that looked like it might allow the access that you desire.

https://www.microsoft.com/en-us/download/details.aspx?id=25250

I have heard of this 3rd party tool that allows a user to run a program as an administrator account. I don't know if that would work for task manager or not.

https://robotronic.de/runasroben.html

Have you tried having your manager access the Terminal Services mmc snapin's?

https://techcommunity.microsoft.com/t5/ask-the-performance-team/ws2008-terminal-server-management-and-administration/ba-p/372790

http://woshub.com/how-to-run-tsadmin-msc-and-tsconfig-msc-snap-ins-on-windows-server-2012-rds/

In addition, there is no Security tab in the tsconfig.msc console in the RDP-Tcp connection properties. This tab was handy for granting permissions to the tech support team (non-admin group) to connect and manage user sessions on RDS host. I use the following command to give a specific group full control over the RDP sessions on the server:
wmic /namespace:\root\CIMV2\TerminalServices PATH Win32_TSPermissionsSetting WHERE (TerminalName ="RDP-Tcp") CALL AddAccount "woshub\helpdeskteam",2

Answer 2

What specific information are they looking for?

In a Powershell prompt, the quser command should show who is logged on. You can then see the program names they are running via Get-Process and filtering on session ID.

quser  
Get-Process | Where-Object -Property SI -eq 1  

This is from Win10, but I would expect to set similar results on WinServer.

Answer 3

I want that my domain user can have access of Task Manager of Server so that he can see all the task same as Administrator can. How to implement such thing ? Hope this is clear.

Answer 4

Thanks for all the pains.
The non-administrator is a person working as Team Lead and wants to see as to how many users have logged in etc.. details which related to Users. Is there any way around ?

Answer 5

Yes, that gives them list of there profile only. They want to know all users who have logged in.