Cannot Run Disable-ADAccount as Scheduled Task on Server

Diane Burns
Diane Burns used Ask the Experts™
on
I am trying to setup a powershell script to run as a scheduled task that disables an AD account every evening.

Disable-ADAccount -Identity <UserName>

The above script works when run manually, but not as a scheduled task.  So far I have tried running this under the System account on both the DC (server 2008 R2) and another member server (server 2012 R2) but although they say "Task Completed" in the history, the account remains enabled.  To clarify, the settings are here GeneralActions
I have also tried running it as myself, but get the error that I need "Log on as batch right" permissions

So my question is what do I need to do to get this working?  And is it better to run it from the DC or the other server?

Thanks for your help
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
PowerShell Developer
Top Expert 2010
Commented:
Why would the computer account running the script have rights to disable the user account? Have you granted the server account rights to disable the user?

You'll have a slight challenge that the task scheduler works on exit codes, and PowerShell whether the command works or not, will not be returning an exit code like that.
Diane BurnsIT Support Analyst

Author

Commented:
Brilliant thank you that works!

For anyone reading this who needs to know the exact procedure, I used Delegation Wizard in AD to give the server account permissions to "create, delete and manage user accounts" on the OU containing the user account.

Thanks for pointing me in the right direction!
Diane BurnsIT Support Analyst

Author

Commented:
this method worked

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial