Restore the original task manager after replacing it with the Sysinternals process explorer

Question

After replacing the default Windows task manager with Sysinternals’ process explorer via the Options → Replace task manager menu, how do you undo that action, i.e. restore the original task manager? I’ve already tried clicking that menu again, but it doesn’t do anything.

Answer 1

Delete the subkey Debugger of the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe.

In cmd, you can accomplish this by running (as admin): reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe" /v Debugger.

Answer 2

maybe they fixed that in the latest versions?

ugh another post in microsoft forums suggests to

1. run procexp.exe (the 32-bit version, not procexp64.exe), choose Options -> Replace Task Manager there
2. close it
3. call task manager, so the 32-bit procexp is opened, and go to Options -> Restore Task Manager.

I am on Windows 10 Now I didn't see that happen, 32-bit procexp still writes "Replace Task Manager" But if I open procexp.exe as Administrator there is a tick sign instead of a Shield sign next to Replace Task Manager -> I press on the tick sign, the tick goes away.

I tried to do the above with 64-bit version and it worked too - it's just that instead of a tick sign there's always a shield.

oh whatever.

Answer 3

We can accomplish this using PowerShell:

# Restore taskmgr.exe as Task Manager
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\" -Name 'Debugger' 

# Check if PROCEXP64.EXE is still Task Manager
if($null -eq (Get-ItemProperty  -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\" -ErrorAction  SilentlyContinue | Select-Object -ExpandProperty 'Debugger' -ErrorAction Stop)) { 
    Write-Host "taskmgr.exe successfully restored as Task Manager"
}