Solved

How can a non-administrator run a predefined task on a remote Windows 2008 server

Posted on 2011-09-16
8
1,557 Views
Last Modified: 2012-05-12
Is it possible for a non-administrator account to run a pre-defined scheduled task on Windows 2008 from a remote Windows 7 desktop? If it is how?
0
Comment
Question by:ged0521
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 81

Expert Comment

by:David Johnson, CD, MVP
ID: 36553816
have them run a batch file or script that elevates itself i.e. the batch has a built in runas section that calls another batch or script
0
 
LVL 54

Expert Comment

by:McKnife
ID: 36554002
Possible.
For example use psexec to run a command remotely or start a task remotely using schtasks together with psexec.
If the remote user has no admin rights on the server and should not be allowed to view the password, you will have to setup a scheduled task on win7 that uses an account that is admin on the remote 2008 and save the admins password. Next, make that task startable (NOT changeable, only startable) by your weak user. To do this, modify the ACL of that task file at c:\windows\system32\tasks\YourTask. Furthermore that account you use will need to be granted the privilege to logon as a batch job - this should be set via domain GPO.
0
 
LVL 24

Assisted Solution

by:Sandeshdubey
Sandeshdubey earned 125 total points
ID: 36555737
Add the user to remote desktop group and add the user in allow logon to terminal service right.After adding the user,the user can take remote session of the server and can execute the task.
Refer this link:http://support.microsoft.com/kb/278433
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 

Author Comment

by:ged0521
ID: 36563720
While solution #2 and #3 could be made to work I was hoping to keep the user off of the remote console and not use an account with administrative access to the Windows 2008 server.  I have been attempting to modify the DACL using the "sc sdset SCMANAGER" command to allow a specific user to connect from the Windows 7 workstation to run the predefined task on the Windows 2008 server.  I cannot even get the schtasks /run /S <remote computer>  /U <user> /TN <task> to work unless the user is an administrator on the remote system.  I have configured the non-administrator account with the logon as a batch job right.  I keep getting "Access Denied" error on the remote system.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 36566059
Please explain why going my way would expose anything to risks.
0
 

Author Comment

by:ged0521
ID: 36566397
It is not so much the risks as the administrative effort needed with this solution.  Mutiple users and mutiple workstation need to have addtional software loaded and configured; password changes to the account (to meet policy) will require making adjustments on each workstation configured with this solution.
0
 
LVL 54

Accepted Solution

by:
McKnife earned 125 total points
ID: 36566905
I don't see too much effort:
You can deploy psexec or put it on a network share, that effort is low as can be. The tasks password changes can be a pain, yes indeed. It is recommended to deploy a task using GPOs - this way you can even mass-update the passwords.
0
 

Author Closing Comment

by:ged0521
ID: 36567694
While the two solutions do meet the need I was hoping to remotely schedule a task using either schtasks or Task Scheduler from the Windows 7 workstation and the user's account.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question