Thank you all for you input. I tried renaming the taskmgr.exe and it just magically re-appeared with it original name. So it got me thinking, if it cannot find the original file it recreates it, what happens if I remove the pupil permissions to the file so it still exists, it just can't run, and it worked. To stop the stupid task manager is disabled message, just deny read permissions for the user to c:\windows\system32\taskmgr.exe and the message goes. Thank you all for your help.