AT.exe displaying access denied as non-admin users from the comand line

Posted on 2004-03-22
Last Modified: 2012-08-14
Hi all,
       I have been atempting to allow non-admin users to be able to access at.exe from te command line. the reason for this is that in our logon AD scripts, I have scheduled tasks using the at command.  this all work fine at as admin user of course.

In the trouble shooting I have done, using the regedt32 command I have set the HKEY_LOCAL_MACHINE\current control set\system\services\schedule and gave the users group FULL Control.  Now, after rebooting and running the at command from the command line as a non-admin user It still get "access denied".

Any one have any ideas?

Question by:nappy_d
LVL 10

Expert Comment

ID: 10653626
Are there any policies restricing non-admin user access?  Have you checked the ACL of the actual file?

LVL 32

Author Comment

ID: 10654548
Yes, I did make sure that the ntfs permissions of the at.exe file located in the c:\windows\system32 dir was set to full control for all non-admin users.

Expert Comment

ID: 10654763
When you schedule a task with the at command it runs under the SYSTEM user account (Full control over the whole system etc). This is very dangerous. I would think twice about trying this if i were you.
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.


Expert Comment

ID: 10764887
What is the Script trying to do?

maybe we can find a different way to schedule then allowing the users to do it.

What is the client  ans server OS.

LVL 32

Author Comment

ID: 10765428
Waht I am attempting to do is to schedule some comands such as:

REM at 9:30 /every:m,t,w,th,f,s,su \\<servername>\vphome\grc.dat

This way my mgmt svr for Antivirus is referenced.  There are many other at commands that I would like to schedule. My issue is that when I do this and I run the at command I cannot see the scheduled events, even though it is part of their logon script.

Accepted Solution

nickymo earned 250 total points
ID: 10766790
maybe you should configure the server with the scheduled tasks. then copy the relavant files to a share.

further on from that the logon script should then copy the files to the "\\<servername>\vphome\grc.dat" area when they need it.

It is not common practice for normal users to run schedule task from a logon script.

hope this helps



Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
Windows 10 is here and for most admins this means frustration and challenges getting that first working Windows 10 image. As in my previous sysprep articles, I've put together a simple help guide to get you through this process. The aim is to achiev…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question