TaskNoKill can accept three arguments – “protect”, “app” and “args”.
yes – Application specified in app argument will be launched and immediately protected.
|app||Executable path in double quotes. i.e.
|args||Additional arguments that are passed to created process (optional)|
- Launch Calculator and protect it.
tasknokill.exe --protect=yes --app="C:\Windows\System32\calc.exe"
- Remove protection. This will bring back ability of terminating calc.exe.
tasknokill.exe --protect=no --app="C:\Windows\System32\calc.exe"
How it works ?
Protection is achieved by modifying Access Control List of target process. An access control entry of deny type and
PROCESS_TERMINATE mask is set for "World" (Everyone) user.
PROCESS_QUERY_INFORMATION is also used to prevent manual ACL modification in tools like Process Explorer:
Protected process can still be terminated by itself, or from elevated task managers etc.
TaskNoKill is freeware, free also for commercial use. Not for sale.