Task Manager

[update]

1. How to avoid destroying a process using Task Manager.
We'we got an App which calc. time a user has spent after it is logged on, but the user can close the App by Task Manager.
Could You pls to tell how to avoid such behaviour ???

2. Is it possible to investigate all the I/O op. of some process???
What i have to implement??? (i mind with no WinApi f-ions patching)

Thanks.

[Sam Hobbs]

You should look to see if there is an administrative data that provides that information; my guess is that you don't need a custom program to determine the times that a user has been logged on.

If you must have a custom application as you describe, then you should check to see if there is any other administrative solutions for the problem you describe. For example, it is possible to Disable Task Manager (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/213.asp).

Another possibility is to make you application a service. Look at Cannot End Service Processes with Task Manager (http://support.microsoft.com/default.aspx?scid=kb;en-us;155075) to get an idea of how that might work.