?
Solved

Enable a non Admin to run a Scheduled Task without giving them admin rights.

Posted on 2008-06-13
5
Medium Priority
?
477 Views
Last Modified: 2013-12-04
Need to enable a non administrative group to run a current scheduled task without giving them admin rights - The task is already set up to run as a service account that has admin rights just need to give them rights to run the service only.  I added the group to the permissions of the task but they do not have rights to see the scheduled tasks of that server to run it.  
0
Comment
Question by:Kizzy12
  • 3
  • 2
5 Comments
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 1500 total points
ID: 21781388
This is to manually run a task that is normally schedule from certain times? You could try my very popular runas script which allows you keep a password encoded (not encrypted) from them: http://xinn.org/RunasVBS.html But scheduled tasks are supposed to be automagic, and not need someone to kick them off at a certain time.

What happens when a user who is not admin, right-click's on the task and select's "run" ?
You can try from the cmd line too, schtasks /run /tn "Security Script"
http://technet2.microsoft.com/windowsserver2008/en/library/2e713203-3dd8-491b-b9e1-9423618dc7e81033.mspx?mfr=true
-rich
0
 

Author Comment

by:Kizzy12
ID: 21782072
Thanks for your input.  We didn't want to have to set it up to use Runas.  I found a work around today which seems to give us what we wanted.
The scheduled task runs on it's own but at times we wanted to give a non admin rights to run if needed on off hours.
I added the group to the Task permissions RWX only
I then added this group to the task folder using CACLS C:\WINDOWS\TASKS /E /G GROUP:R
This gives the group rights to only view the one task as well as execute and run if needed.  
0
 
LVL 38

Expert Comment

by:Rich Rumble
ID: 21783016
You can ask for your points back if you wish, as I don't feel I contributed to the answer, I'm glad you did find what works.
-rich
0
 

Author Comment

by:Kizzy12
ID: 21792984
No you can keep the points since your solution also would work.  I don't track or follow the points anyway.  Thanks again for your support.
0
 
LVL 38

Expert Comment

by:Rich Rumble
ID: 21795614
Fair enough, thanks!
-rich
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question