I have a password protected admin account which is not used itself, it was created for a security reasons. Practically my computer is used with a second password protected standard user account. When I'm trying to execute some task which require admin rights, I receive an UAC prompt where I have to enter the admin password. Problem is that I still can run task manager without an UAC prompt, which is seems incorrect because the UAC level is the highest possible and the account have no administrator rights, I also think is't bad for system security. Can I fix it?

  • If you want to disable task manager then disable it through the applicable group policy – Ramhound Dec 17 '17 at 1:44
  • 1
    Why do you believe that the ability to run Task Manager is a security concern? Can you use it to terminate processes that aren’t running under your (non-privileged) account?  Can you use it to see processes that aren’t running under your account? – G-Man Dec 17 '17 at 1:45
  • As @G-Man says, running Task Manager from a non-privileged account only gives access to tasks belonging to hat account. – Blackwood Dec 17 '17 at 2:00
  • @G-Man, if a malware somehow get into my system, can it run taskmgr.exe and then do some malicious actions through it, such as shutting down important processes or creating a new task such as running .bat file which won't let my system load the next time I turn on the computer? – Andre Dec 17 '17 at 11:54
  • no, as I wrote the malware can run taskmanager only with standard rights, so it can't close processes running as admin or stop services. – magicandre1981 Dec 17 '17 at 17:37

You don't understand what highestAvailable means.

highestAvailable means the application gets the highest privileges according to its group membership, so it will elevate (UAC dialog) if the current user is a part of the administrator group. When a standard user runs the process, no UAC dialog is shown and the process runs with the standard permissions and displays less data. This is what you see.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.