AT.exe displaying access denied as non-admin users from the comand line

Posted on 2004-03-22
Medium Priority
Last Modified: 2012-08-14
Hi all,
       I have been atempting to allow non-admin users to be able to access at.exe from te command line. the reason for this is that in our logon AD scripts, I have scheduled tasks using the at command.  this all work fine at as admin user of course.

In the trouble shooting I have done, using the regedt32 command I have set the HKEY_LOCAL_MACHINE\current control set\system\services\schedule and gave the users group FULL Control.  Now, after rebooting and running the at command from the command line as a non-admin user It still get "access denied".

Any one have any ideas?

Question by:nappy_d
LVL 10

Expert Comment

by:Justin C
ID: 10653626
Are there any policies restricing non-admin user access?  Have you checked the ACL of the actual file?

LVL 32

Author Comment

ID: 10654548
Yes, I did make sure that the ntfs permissions of the at.exe file located in the c:\windows\system32 dir was set to full control for all non-admin users.

Expert Comment

ID: 10654763
When you schedule a task with the at command it runs under the SYSTEM user account (Full control over the whole system etc). This is very dangerous. I would think twice about trying this if i were you.
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.


Expert Comment

ID: 10764887
What is the Script trying to do?

maybe we can find a different way to schedule then allowing the users to do it.

What is the client  ans server OS.

LVL 32

Author Comment

ID: 10765428
Waht I am attempting to do is to schedule some comands such as:

REM at 9:30 /every:m,t,w,th,f,s,su \\<servername>\vphome\grc.dat

This way my mgmt svr for Antivirus is referenced.  There are many other at commands that I would like to schedule. My issue is that when I do this and I run the at command I cannot see the scheduled events, even though it is part of their logon script.

Accepted Solution

nickymo earned 750 total points
ID: 10766790
maybe you should configure the server with the scheduled tasks. then copy the relavant files to a share.

further on from that the logon script should then copy the files to the "\\<servername>\vphome\grc.dat" area when they need it.

It is not common practice for normal users to run schedule task from a logon script.

hope this helps



Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Hello I read in a discussion about a person who configured a very simple mirror RAID with two hard drives; the system and data were on the same partition. He asked how to repair the system as it was not booting up anymore. In his case running …
Just about everyone has an old PC laying around.  Ask anyone in the IT industry, whether they are a professional or play in it as a hobby.  From outdated Desktops to cheap "throwaway" laptops, they are all around and not as hard to "fix up" as you m…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question