?
Solved

Giving access to C:\WINDOWS\Tasks folder

Posted on 2006-03-22
7
Medium Priority
?
451 Views
Last Modified: 2010-08-05
Hi experts,

I have a windows 2003 server machine on my domain, and i have some scheduled tasks created under the folder C:\WINDOWS\Tasks.
Currently all these task are running with their assigned schedule.

I need to give access to one of the domain users to the Tasks folder, so that he can run them manuallay. My user has remote desktop access to the server.

I would appreciate any help

thanks
0
Comment
Question by:cakirfatih
  • 4
  • 2
6 Comments
 
LVL 12

Expert Comment

by:valicon
ID: 16260249
Give the user account read and execute permissions to the folder and make sure that the actual task inherits the same permissions.
0
 

Author Comment

by:cakirfatih
ID: 16260301
Right clicking and going to properties of that folder does not display the Security tab.
is there another way of assigning permissios to my user.
0
 
LVL 12

Expert Comment

by:valicon
ID: 16260349
I apologize I misread the folder location...
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 
LVL 12

Accepted Solution

by:
valicon earned 1500 total points
ID: 16260387
All you need to do is to right click on the actual task and add the user with the permissions of read and execute.  Here is some further information from Technet:

Task Scheduler and security
When creating a scheduled task, you must enter a user name and password, either in the Add Scheduled Task Wizard or in the Run as box in the Task tab of the scheduled task's property dialog box. When the scheduled task runs, the program you've scheduled runs as if it were started by the user you specified, with that user's security context. For example, if the user specified for a scheduled task is a member of the Backup Operators group on the local computer, the program specified in the scheduled task file runs as if a member of the Backup Operators group is logged onto the local computer. If another user is logged on to the computer at the time a scheduled task specified for a different user runs, the task runs but is not visible to the current user.

By default, to schedule a task, you must be a member of the Administrators, Backup Operators, or Server Operators group on the local computer. By default, when creating a scheduled task, you cannot enter a user who belongs to a group that has more rights than the group you belong to. For example, if you are a member of the Backup Operators group on the local computer, you cannot specify a member of the Administrators group when creating a scheduled task. However, a member of the Administrators group can enable a member of any group to create or modify scheduled tasks, by using the cacls command to modify the discretionary access control list (DACL) of the Tasks folder. By default, the Tasks folder is located in the \Windows folder on the hard drive of the local computer, for example C:\Windows\Tasks. For more information about using cacls, see Cacls. For more information about groups, see Default local groups and Default groups.

Note

• A user for whom you assign permissions to the Tasks folder using cacls will be able to access scheduled tasks for all users. Choose which users to give access to the Tasks folder judiciously.
 

In Windows Server 2003 family operating systems, passwords have an expiration date. If you are scheduling recurring tasks that run indefinitely, you need to be aware of the expiration date on your passwords. If the password changes for an account on a domain, then you must update the tasks scheduled to run under that account.

When a job is created through Task Scheduler, account information for all tasks that use the same run as account is stored only once. Task Scheduler validates the run as account when a job is created, which prevents incorrect run as account information from being saved and, as a result, prevents other existing jobs that use the same account from being affected. If the password validation fails, a job file is created, but it will not run.

If the run as account password has expired or the account has been deleted and recreated, the password must be updated for jobs to run. Updating the password for one job automatically updates it for all jobs that use the same run as account.

When you create a scheduled task, the user credentials you specify for that specific task are securely stored on the local computer.

0
 
LVL 12

Expert Comment

by:valicon
ID: 16270748
Do you need any further help with this issue?  If so please let me know :)
0
 

Author Comment

by:cakirfatih
ID: 16311824
Hi,
I have not tried your solution yet. I will let you know after i try it.

thanks
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question