Solved

AT.exe displaying access denied as non-admin users from the comand line

Posted on 2004-03-22
6
1,972 Views
Last Modified: 2012-08-14
Hi all,
       I have been atempting to allow non-admin users to be able to access at.exe from te command line. the reason for this is that in our logon AD scripts, I have scheduled tasks using the at command.  this all work fine at as admin user of course.

In the trouble shooting I have done, using the regedt32 command I have set the HKEY_LOCAL_MACHINE\current control set\system\services\schedule and gave the users group FULL Control.  Now, after rebooting and running the at command from the command line as a non-admin user It still get "access denied".

Any one have any ideas?

0
Comment
Question by:nappy_d
6 Comments
 
LVL 10

Expert Comment

by:BloodRed
ID: 10653626
Are there any policies restricing non-admin user access?  Have you checked the ACL of the actual file?

-BR
0
 
LVL 32

Author Comment

by:nappy_d
ID: 10654548
Yes, I did make sure that the ntfs permissions of the at.exe file located in the c:\windows\system32 dir was set to full control for all non-admin users.
0
 
LVL 4

Expert Comment

by:jcoppin
ID: 10654763
When you schedule a task with the at command it runs under the SYSTEM user account (Full control over the whole system etc). This is very dangerous. I would think twice about trying this if i were you.
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 1

Expert Comment

by:nickymo
ID: 10764887
What is the Script trying to do?

maybe we can find a different way to schedule then allowing the users to do it.

What is the client  ans server OS.

:)
0
 
LVL 32

Author Comment

by:nappy_d
ID: 10765428
Waht I am attempting to do is to schedule some comands such as:

REM at 9:30 /every:m,t,w,th,f,s,su \\<servername>\vphome\grc.dat

This way my mgmt svr for Antivirus is referenced.  There are many other at commands that I would like to schedule. My issue is that when I do this and I run the at command I cannot see the scheduled events, even though it is part of their logon script.
0
 
LVL 1

Accepted Solution

by:
nickymo earned 250 total points
ID: 10766790
maybe you should configure the server with the scheduled tasks. then copy the relavant files to a share.

further on from that the logon script should then copy the files to the "\\<servername>\vphome\grc.dat" area when they need it.

It is not common practice for normal users to run schedule task from a logon script.

hope this helps

:)

0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Search also sub-folder 1 61
VMWare Virtual Machine Loss of Network on Reboot 4 74
Windows 10 won't boot, just a black cursor.  Help. 6 91
SCCM And Branchcache Server 1 60
Windows 7 does not have the best desktop search built in. This is something Windows 7 users have struggled with. You type something in, and your search results don’t always match what you are looking for, or it doesn’t actually work at all. There ar…
#Citrix #POC #XenDesktop #vCenter #VMware #ESX
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now