P
pimy103@gmail.com
Guest
Server OS: Server 2003 R2
Client OS: XP Pro SP2
I am trying to allow a non-admin user to run a scheduled task on a
remote server. According to the Help text, the user must be a member
of the local Administrators group, the local Backup Operators group,
the domain Server Operators group, or “have been delegated the
appropriate authority, on the local computer”. I would prefer not to
add the user to one of the three groups I mentioned. I have given the
user Read+Execute on the target task. I also gave the user Read (and
even Full Control) to the C:\windows\tasks folder on the server using
CACLS, still no dice. When the user brings up the server via UNC, they
don’t see Scheduled Tasks. I tried running schtasks /query /s serverA,
but the user gets an Access is denied message. I confirmed that the
user can view the scheduled tasks folder when they are a member of the
Backup Operators group, but when they double-click on it, it doesn’t
list the scheduled tasks.
How can I go about delegating the proper authority? Is there a group
policy setting in Server 2003 that will allow a user to run a
scheduled task remotely (i.e. \\server, double-click on scheduled
tasks, right-click the task and select Run)? I already tried providing
the user with Log on as a batch job, but that had no impact.
Thanks,
pimy
In Windows Help:
To run a scheduled task immediately
1. Open Task Scheduler.
2. Right-click the task that you want to run, and then click Run.
Notes
• To perform this procedure, you must be a member of the
Administrators, Backup Operators, or Server Operators group, or have
been delegated the appropriate authority, on the local computer. As a
security best practice, consider using Run as to perform this
procedure.
• To open Task Scheduler, click Start, point to Settings, click
Control Panel, and then double-click Scheduled Tasks.
• You can also run a scheduled task immediately by selecting a task in
the details pane, and then clicking Run on the File menu
Client OS: XP Pro SP2
I am trying to allow a non-admin user to run a scheduled task on a
remote server. According to the Help text, the user must be a member
of the local Administrators group, the local Backup Operators group,
the domain Server Operators group, or “have been delegated the
appropriate authority, on the local computer”. I would prefer not to
add the user to one of the three groups I mentioned. I have given the
user Read+Execute on the target task. I also gave the user Read (and
even Full Control) to the C:\windows\tasks folder on the server using
CACLS, still no dice. When the user brings up the server via UNC, they
don’t see Scheduled Tasks. I tried running schtasks /query /s serverA,
but the user gets an Access is denied message. I confirmed that the
user can view the scheduled tasks folder when they are a member of the
Backup Operators group, but when they double-click on it, it doesn’t
list the scheduled tasks.
How can I go about delegating the proper authority? Is there a group
policy setting in Server 2003 that will allow a user to run a
scheduled task remotely (i.e. \\server, double-click on scheduled
tasks, right-click the task and select Run)? I already tried providing
the user with Log on as a batch job, but that had no impact.
Thanks,
pimy
In Windows Help:
To run a scheduled task immediately
1. Open Task Scheduler.
2. Right-click the task that you want to run, and then click Run.
Notes
• To perform this procedure, you must be a member of the
Administrators, Backup Operators, or Server Operators group, or have
been delegated the appropriate authority, on the local computer. As a
security best practice, consider using Run as to perform this
procedure.
• To open Task Scheduler, click Start, point to Settings, click
Control Panel, and then double-click Scheduled Tasks.
• You can also run a scheduled task immediately by selecting a task in
the details pane, and then clicking Run on the File menu