Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

task manager disabled by admistrator

Feb 15, 2008 12:26AM PST

hi ,
i read the previos forum actuall i have the same problem too
i have windows xp professional and when i press cntol alt del i get the message " task manager disabled by admistrator"
i am the admistrator . i tried aa taskmanager fix tool.. no use..
i tried a ewido online scan no use..
i used tools for removin klez and yaha virus still no use..

pl help me out.. and does this prob cause the computer to slow down??

the thing is am a dentist and iknow little technical stuff

Discussion is locked

- Collapse -
Task Manager has been disabled by your administrator
Feb 15, 2008 12:39AM PST

Resolution

This error is caused if the DisableTaskMgr restriction is enabled. To enable Task Manager, try one of these methods:

IMPORTANT: If this restriction was enabled in your system without you doing anything or without your knowledge, then it's highly likely that a Virus has blocked the usage of Task Manager in your system by enabling the DisableTaskMgr policy via the registry. I strongly suggest that you perform a thorough checkup of your system immediately. Steps listed in the Resolution section of this article helps you unblock the Task Manager, but that does not remove the Virus (if any) from your system.

Pls. read the methods here:

http://windowsxp.mvps.org/Taskmanager_error.htm

- Collapse -
still the same
Feb 15, 2008 3:04AM PST

i tried all those things..
i copuld not down load the fix.. its stlll in th e same condition

- Collapse -
You do NOT have access to another computer.....
Feb 15, 2008 3:27AM PST

to download the Regfix??

SYMPTOMS
When you try to open Windows Task Manger, the following error may appear: "Task Manager has been disabled by your administrator".

CAUSE

There following

1. You use account that was blocked via the "Local Group Policy" or "Domain Group Policy".

2. Some registry settings block you from using "Task Manager".




Back to the top
RESOLUTION


1. Verity that the "Local Group Policy" or "Domain Group Policy" doesn?t block you from using

"Task Manager".

1.1 "Local Group Policy"

a. Go to "Start" -> "Run" -> Write "Gpedit.msc" and press on "Enter" button.

b. Navigate to "User Configuration" -> "Administrative Templates" -> "System" -> "Ctrl+Alt+Del Options"

c. In the right side of the screen verity that "Remove Task Manager"" option set to "Disable" or "Not Configured".

d. Close "Gpedit.msc" MMC.

e. Go to "Start" -> "Run" -> Write "gpupdate /force" and press on "Enter" button.

Note: If you are using Windows 2000, please follow KB q227302 instead stage "e".

Using SECEDIT to Force a Group Policy Refresh Immediately
http://support.microsoft.com/kb/q227302/


1.2 "Domain Group Policy"

a. Contact you local IT support team.


2. Verity correct registry settings::

a. Go to "Start" -> "Run" -> Write "regedit" and press on "Enter" button.


Warning: Modifying your registry can cause serious problems that may require you to reinstall your operating system.
Always backup your files before doing this registry hack.

MORE:

http://support.microsoft.com/default.aspx/kb/555480

- Collapse -
Maybe this link is "easier" to follow.....
Feb 15, 2008 4:01AM PST
- Collapse -
thyanks
Feb 16, 2008 1:36AM PST

thanks a llot.. got my comp prob fixed!!!
Happy

- Collapse -
task manager
Feb 19, 2008 10:14AM PST

this is caused by a virus. article id/913623..win xp.. go to the registry ..start/run/type regedit,and click ok---go and set the value of the disabletaskmgr registry entry to 0 (zero)--in the left pane,click the following registry subkey: hkey_currant_user\software\microsoft\windows\currantversion\policies\systems good luck ....happy

- Collapse -
It's Brontok virus
Feb 19, 2008 6:03PM PST

Yes, it's a virus known as Brontok, if you know how to create a registry file " .inf ", make one for yourself, name it Restore.inf or what you want, include the following inside your file.

[Version]
Signature = "$CHICAGO$"

[DefaultInstall]
AddReg=Agregar
DelReg=Borrar

[Agregar]
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",Hidden,0x00010001,"1"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",HideFileExt,0x00010001,"0"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",SuperHidden,0x00010001,"1"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",ShowSuperHidden,0x00010001,"1"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",WebView,0x00010001,"1"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",WebViewBarricade,0x00010001,"1"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL",CheckedValue,0x00010001,"1"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\NOHIDDEN",CheckedValue,0x00010001,"2"

[Borrar]
HKCU,"Software\Microsoft\Windows NT\CurrentVersion\Policies\System",DisableRegistryTools
HKCU,"Software\Microsoft\Windows NT\CurrentVersion\Policies\System",DisableTaskMgr
HKCU,"Software\Microsoft\Windows NT\CurrentVersion\Policies\System",NoDispCPL
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",NoRun
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",NoDrives
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",DisallowRun
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",RestrictRun
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",NoFolderOptions
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",DisableRegistryTools
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",DisableTaskMgr
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",DisableCMD
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",NoDispCPL
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",NoAdminPage
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp",Disabled
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp",Norealmode
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore",DisableSR
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",NoFolderOptions
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System",DisableRegistryTools
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System",DisableTaskMgr
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System",NoDispCPL

This will enable again Task manager, Regedit, MS-Dos command line and everything Brontok disables, without forcing you to manually edit anything, avoiding the risk of damage to your registry.

Hope this help you and anyone that has the same problem.

Arq. Jose Ignacio Mendieta Vera.

- Collapse -
Not necessarily one specific virus
Feb 20, 2008 7:04AM PST

This is quite common among viral behaviour on your PC these days, because they don't want you to terminate the virus. So it is not necessarily the Brontok virus.

Another way of removing these restrictions can be found on the following page

http://www.cybertopcops.com/tips_tricks-remove-malware-system-restrictions.php

mohitygupta, glad you got your PC fixed. You should scan your PC for malware and clean out the infections otherwise the restrictions will return.

- Collapse -
Nice info but how do you run it?
Jan 25, 2010 4:08AM PST

OK, Nice info and I can certainly create the file but what then? Regedit does not want it. What command gets this stuff entered?

[Version]
Signature = "$CHICAGO$"

[DefaultInstall]
AddReg=Agregar
DelReg=Borrar

[Agregar]
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",Hidden,0x00010001,"1"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",HideFileExt,0x00010001,"0"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",SuperHidden,0x00010001,"1"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",ShowSuperHidden,0x00010001,"1"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",WebView,0x00010001,"1"
HKCU,"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced",WebViewBarricade,0x00010001,"1"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL",CheckedValue,0x00010001,"1"
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\NOHIDDEN",CheckedValue,0x00010001,"2"

[Borrar]
HKCU,"Software\Microsoft\Windows NT\CurrentVersion\Policies\System",DisableRegistryTools
HKCU,"Software\Microsoft\Windows NT\CurrentVersion\Policies\System",DisableTaskMgr
HKCU,"Software\Microsoft\Windows NT\CurrentVersion\Policies\System",NoDispCPL
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",NoRun
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",NoDrives
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",DisallowRun
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",RestrictRun
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",NoFolderOptions
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",DisableRegistryTools
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",DisableTaskMgr
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",DisableCMD
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",NoDispCPL
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\System",NoAdminPage
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp",Disabled
HKCU,"Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp",Norealmode
HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore",DisableSR
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Explorer",NoFolderOptions
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System",DisableRegistryTools
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System",DisableTaskMgr
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System",NoDispCPL

- Collapse -
Task Manager Has been disabled by your administrator
Nov 7, 2008 9:39PM PST

I have a weird problem. Can you walk me through to fix my laptop please? I have a Windows XP Home Edition version 2002 Service Pack 2 with no anti-virus programs and 6 days ago after searching for 'roms' to download and finding nothing but POP UP WEBSITES. another browsing window from Internet Explorer popped up and it wouldn't close. So I tried Alt + CTRL + Delete and it said "Task Manager has been disabled by your administrator"

I tried searching for the worm, cookie or trojan by going to "RUN" "REGEDIT" And received "Registry editing has been disabled by your administrator". Then, when I went to check on my local disk 'free space' I noticed that the storage capacity kept on decreasing.

I'm not able to use Firefox as a browser, just IE and I'm not able to download anything through IE because every time I want to download something or an anti-virus it closes the window that will be used to download or my pc acts like if I hadn't clicked on the link to download.

I tried going to the sites you've listed to get my laptop scanned online and when I click, my machine doesn't do anything or sometimes it just shows a 'green progressing image' at the bottom of the browser on the status bar; like if it was trying to load the page but it's not.

What else can I do? I have a roommate who has a desktop PC and we tried uploading AVG anti-virus through her computer to my laptop; and it uploads well except that when I want to install the anti-virus the windows looks like it has been frozen and then, it shows an error message named "msiexec.exe - Application Error" it says "The instruction at "0x76c941b1" referenced memory at "0x76c941b1". The memory could not be "written". Click on OK to terminate the program.

Any alternatives besides re-formatting please?

- Collapse -
Yep, You're Infected.. Please Try...
Nov 8, 2008 1:09AM PST

On a friend or family member's computer, download the Malwarebytes installer and update files from the links below, copy them to a CD or flash drive, then transfer the files to the problem machine and use them.. I use the sites below to download the installer file and the manual updater:

Once downloaded, rename the program installer "mbam-setup.exe" file to something else like "Gogetum.exe", then copy the installer file and the update file to a CD or flash drive.. Transfer the file to the problem machine, then install the "Gogetum.exe" file, then run the update to get the program current.. After that, run a full system scan and delete anything it finds.

Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
http://www.besttechie.net/tools/mbam-setup.exe

Malwarebytes Manual Updater link
http://www.malwarebytes.org/mbam/database/mbam-rules.exe
______________

After that, then download the free program below and run another scan with it. Delete everything it finds:

SUPERAntispyware Removal Tool

Hope this helps.

Grif