It is possible to end any process even though it is a service or a system process by previously enabling the debug privilege. This privilege is assigned to Administrators and is disabled in the access token. While Task Manager
does not make use of the debug privilege, the KILL utility does.
You may assign this privilege to users other than Administrators with User Manager. To assign this privilege do the following:
- On the Policies menu, click User Rights.
- Select Show Advanced User Rights.
- In the Right box, click Debug Programs, and then click Add to add users.
In Windows 2000 the process is slightly different. You may assign the debug privilege to non-Administrator users use the following steps:
For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:
- Open the Group Policy snap-in, choose the Local Policy in this case and User Rights Assignment.
- In the right pane, double-click Debug Programs.
- Click the Add to add other users.
- Click OK.
Domain Security Policy in Windows 2000
Using SECEDIT to Force a Group Policy Refresh Immediately