|
Permissions needed for Scheduled Tasks
Q: I'm trying to
create a scheduled tasks from a .Net application (actually a
webservice). It runs as Network Service and this account doesn't have rights
to create scheduled tasks on the machine so I need to create another account
for this application. My questions for you is, which permissions is needed
in order to create and modify scheduled tasks in Windows XP/Server 2003 (and
2008)?
A: By default, to
schedule a task, you must be a member of the Administrators,
Backup Operators, or Server Operators group (Windows 2003) on the local
computer. However, a member of the Administrators group can enable a member
of any group to create or modify scheduled tasks, by using the cacls
command to modify the discretionary access control list (DACL) of the Tasks
folder. By default, the Tasks folder is located in the \Windows folder on
the hard drive of the local computer, for example C:\Windows\Tasks. For
more information about the cacls command, see
http://technet2.microsoft.com/windowsserver/en/library/3be8b68f-f83c-409b-8b
97-f026f75e17ca1033.mspx?mfr=true.
Based on my research, to enable the non-administrator user account to
schedule the task on the Windows XP computers, we need to grant the full
control permission on the Schtasks.exe file to the user group, besides the
%systemroot%\Tasks folder.
The Schtasks.exe file is located under the directory:
%Systemroot%\system32. Please find this file and give the full control
permission.
More information
============
Task Scheduler and security
http://technet2.microsoft.com/windowsserver/en/library/f60ea8d6-d2af-4dd0-b0
50-c09951826f5d1033.mspx?mfr=true
Task Scheduler Best practices
http://technet2.microsoft.com/windowsserver/en/library/573a07f4-3fca-4e95-8c
94-b3842b8402731033.mspx?mfr=true
Please also ensure that there is no group policy that is preventing
creating/modifying the scheduled tasks. See:
HOW TO: Prevent Users from Scheduling Tasks in Windows 2000
http://support.microsoft.com/kb/310208
Post your questions, comments, feedbacks and suggestions
Contact a consultant
Related Topics
|
|
