Solved

How can a non-administrator run a predefined task on a remote Windows 2008 server

Posted on 2011-09-16
8
1,515 Views
Last Modified: 2012-05-12
Is it possible for a non-administrator account to run a pre-defined scheduled task on Windows 2008 from a remote Windows 7 desktop? If it is how?
0
Comment
Question by:ged0521
8 Comments
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 36553816
have them run a batch file or script that elevates itself i.e. the batch has a built in runas section that calls another batch or script
0
 
LVL 54

Expert Comment

by:McKnife
ID: 36554002
Possible.
For example use psexec to run a command remotely or start a task remotely using schtasks together with psexec.
If the remote user has no admin rights on the server and should not be allowed to view the password, you will have to setup a scheduled task on win7 that uses an account that is admin on the remote 2008 and save the admins password. Next, make that task startable (NOT changeable, only startable) by your weak user. To do this, modify the ACL of that task file at c:\windows\system32\tasks\YourTask. Furthermore that account you use will need to be granted the privilege to logon as a batch job - this should be set via domain GPO.
0
 
LVL 24

Assisted Solution

by:Sandeshdubey
Sandeshdubey earned 125 total points
ID: 36555737
Add the user to remote desktop group and add the user in allow logon to terminal service right.After adding the user,the user can take remote session of the server and can execute the task.
Refer this link:http://support.microsoft.com/kb/278433
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:ged0521
ID: 36563720
While solution #2 and #3 could be made to work I was hoping to keep the user off of the remote console and not use an account with administrative access to the Windows 2008 server.  I have been attempting to modify the DACL using the "sc sdset SCMANAGER" command to allow a specific user to connect from the Windows 7 workstation to run the predefined task on the Windows 2008 server.  I cannot even get the schtasks /run /S <remote computer>  /U <user> /TN <task> to work unless the user is an administrator on the remote system.  I have configured the non-administrator account with the logon as a batch job right.  I keep getting "Access Denied" error on the remote system.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 36566059
Please explain why going my way would expose anything to risks.
0
 

Author Comment

by:ged0521
ID: 36566397
It is not so much the risks as the administrative effort needed with this solution.  Mutiple users and mutiple workstation need to have addtional software loaded and configured; password changes to the account (to meet policy) will require making adjustments on each workstation configured with this solution.
0
 
LVL 54

Accepted Solution

by:
McKnife earned 125 total points
ID: 36566905
I don't see too much effort:
You can deploy psexec or put it on a network share, that effort is low as can be. The tasks password changes can be a pain, yes indeed. It is recommended to deploy a task using GPOs - this way you can even mass-update the passwords.
0
 

Author Closing Comment

by:ged0521
ID: 36567694
While the two solutions do meet the need I was hoping to remotely schedule a task using either schtasks or Task Scheduler from the Windows 7 workstation and the user's account.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question