Well disable their rights to run Task Manager.


Use a policy
http://www.microsoft.com/resources/docum...entry/93504.asp