Help and Support
 

powered byLive Search

Cannot End Service Processes with Task Manager

Article ID:155075
Last Review:February 27, 2007
Revision:2.2
This article was previously published under Q155075

SYMPTOMS

You may receive the following warning message when you try to end a process with Task Manager:
The operation could not be completed. Access is denied.

Back to the top

CAUSE

Stopping a process is done with a call to TerminateProcess (Win32 API). By default, it is not possible to kill a process that is running under a security context different than the one of the process who issued the call to TerminateProcess.

Back to the top

RESOLUTION

To work around this problem, use the KILL command line utility (available with the Windows Resource Kit) to stop processes that do not run under the security context of the logged on user.

Back to the top

MORE INFORMATION

It is possible to end any process even though it is a service or a system process by previously enabling the debug privilege. This privilege is assigned to Administrators and is disabled in the access token. While Task Manager does not make use of the debug privilege, the KILL utility does.

You may assign this privilege to users other than Administrators with User Manager. To assign this privilege do the following:
1.On the Policies menu, click User Rights.
2.Select Show Advanced User Rights.
3.In the Right box, click Debug Programs, and then click Add to add users.
In Windows 2000 the process is slightly different. You may assign the debug privilege to non-Administrator users use the following steps:
1.Open the Group Policy snap-in, choose the Local Policy in this case and User Rights Assignment.
2.In the right pane, double-click Debug Programs.
3.Click the Add to add other users.
4.Click OK.
For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:
221930 (http://support.microsoft.com/kb/221930/EN-US/) Domain Security Policy in Windows 2000
227302 (http://support.microsoft.com/kb/227302/EN-US/) Using SECEDIT to Force a Group Policy Refresh Immediately

Back to the top


APPLIES TO
Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Professional Edition
Microsoft Windows 2000 Datacenter Server
Microsoft Windows NT Server 4.0 Standard Edition
Microsoft Windows NT Workstation 4.0 Developer Edition

Back to the top

Keywords: 
KB155075

Back to the top

Article Translations

 

Related Support Centers

Other Support Options

  • Need More Help?
    Contact a Support professional by Email, Online or Phone.
  • Customer Service
    For non-technical assistance with product purchases, subscriptions, online services, events, training courses, corporate sales, piracy issues, and more.
  • Newsgroups
    Pose a question to other users. Discussion groups and Forums about specific Microsoft products, technologies, and services.