We're encountering a strange situation where computers used by our IT department can't access Task Manager without entering credentials. However, regular users seem to have no issue at all. I'm fairly certain this is a policy-related problem because when I logged in to my standard user account on a different machine (not a domain or local admin), I didn't get prompted for credentials to access Task Manager. Does anyone have ideas on why this discrepancy is happening?
5 Answers
If the user is a local admin, Task Manager tries to launch with admin privileges, which usually doesn’t show a UAC prompt if it’s just a Yes/No action. Non-admins won’t see this prompt and can open it using their rights without extra steps.
It seems like IT users might be part of a higher privilege group on their PCs, like a network administrator group. If that's the case, Task Manager needs to be opened with those higher privileges, which requires credential prompts.
I used to work at a massive company where IT didn't change much. Eventually, I found out that the 'Local Admins' group was actually just linked to 'Domain Admins.' It was a real eye-opener.
Have you checked what 'gpresult' shows about your computer's policy? Running it can help you figure out which policies are applied. Sending the output to an HTML file will give you a clear view of what’s being enforced.
That’s actually how it works. If your account has local admin access, Task Manager opens in elevated mode, and IT should really avoid using local admin accounts for daily tasks. But if you’re using a standard user account and still getting prompted, that’s unusual.
I might have mixed things up; we do use a standard user account daily, and it doesn’t have admin privileges, yet it still asks for creds when opening Task Manager.
Different UAC settings might be the reason behind this problem. You should take a look at your policies applied to the system by running `gpresult /h x.html /scope computer` as an admin.
Exactly, UAC settings play a crucial role here. If those are set to always require approval or credentials, that's likely why you're running into trouble.