• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1980
  • Last Modified:

AT.exe displaying access denied as non-admin users from the comand line

Hi all,
       I have been atempting to allow non-admin users to be able to access at.exe from te command line. the reason for this is that in our logon AD scripts, I have scheduled tasks using the at command.  this all work fine at as admin user of course.

In the trouble shooting I have done, using the regedt32 command I have set the HKEY_LOCAL_MACHINE\current control set\system\services\schedule and gave the users group FULL Control.  Now, after rebooting and running the at command from the command line as a non-admin user It still get "access denied".

Any one have any ideas?

1 Solution
Justin CAWS Solutions ArchitectCommented:
Are there any policies restricing non-admin user access?  Have you checked the ACL of the actual file?

nappy_dAuthor Commented:
Yes, I did make sure that the ntfs permissions of the at.exe file located in the c:\windows\system32 dir was set to full control for all non-admin users.
When you schedule a task with the at command it runs under the SYSTEM user account (Full control over the whole system etc). This is very dangerous. I would think twice about trying this if i were you.
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

What is the Script trying to do?

maybe we can find a different way to schedule then allowing the users to do it.

What is the client  ans server OS.

nappy_dAuthor Commented:
Waht I am attempting to do is to schedule some comands such as:

REM at 9:30 /every:m,t,w,th,f,s,su \\<servername>\vphome\grc.dat

This way my mgmt svr for Antivirus is referenced.  There are many other at commands that I would like to schedule. My issue is that when I do this and I run the at command I cannot see the scheduled events, even though it is part of their logon script.
maybe you should configure the server with the scheduled tasks. then copy the relavant files to a share.

further on from that the logon script should then copy the files to the "\\<servername>\vphome\grc.dat" area when they need it.

It is not common practice for normal users to run schedule task from a logon script.

hope this helps



Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now