Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Anybody know how? So far all I've been able to do is disable the task manager for the admin user.

I used the following registry key:



Ran it as the admin user though and only that admin user got blocked from using the task manager. All the other guides for Windows 7 I saw suggested the use of the Local Group Policy Editor which Windows 7 Home Premium doesn't have.

I think I could make the registry hack work if I could run it as the restricted user. Unfortunately, restricted users can't add entries to the registry.

share|improve this question
up vote 3 down vote accepted

This was my original answer:

Log in as the restricted user, then go to c:\windows and right click on regedit and click "Run as Administrator" (you will be asked for the credentials), and make the same registry changes.

OK, to be honest, after I wrote the answer, I decided to test it, and double-check my answer as I often do. What I found blew up a long-held thought that I had, and I am going to mention it now because I am sure that I am not the only one, who will be surprised.

Despite being logged in as my user "Test", when I ran regedit.exe as administrator (or even a second administrative user), instead of it ONLY running the program with elevated privileges, it also changes the HKEY_Current_User hive to that same administrator account. I was extremely surprised.

So I would do it this way for simplicity: Elevate the user to administrative level temporarily in Control Panel>Users. Log in as that user, and make the registry change exactly as you had above. You can test it immediately by right-clicking the taskbar. Log out, and back in as administrator, and demote the user back to standard. I tested this and it worked.

An even easier way: While logged in as your administrative user, elevate the standard user to administrative level temporarily in Control Panel>Users, then follow the original answer. Now running regedit as that user, it will load their hive, and you can edit it. Then demote them again. This way, it is all done without logging in and out.

I think this is clear, but if I did make something a bit confusing, just ask in the comments, and I will try to clarify.

share|improve this answer
Oh, and then the changes would be reflected on the restricted user? Thanks. Will test it later :) – R.K. Aug 4 '11 at 2:16
Sorry for the initial mistake. – KCotreau Aug 4 '11 at 3:03
That was my initial thought too, so I didn't try it. Though I've never tested it. I was gonna try your first answer later though. Thanks for the answer :) – R.K. Aug 4 '11 at 8:57

Just a different way to do it, you can do: Icacls taskmgr.exe /deny user:F from a command prompt running as administrator. Its a more general approach though.

share|improve this answer

As admin, open regedit.

  • Goto hkey_users
  • File / Load hive.
  • Browse to c:\users\username
  • Type ntuser.dat

Go to the above mentioned key and add a dword. Works on 7 HP.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.