How to allow non-admin to run scheduled tasks remotely?

[Guest pimy103@gmail.com]

Server OS: Server 2003 R2

Client OS: XP Pro SP2

 

I am trying to allow a non-admin user to run a scheduled task on a

remote server. According to the Help text, the user must be a member

of the local Administrators group, the local Backup Operators group,

the domain Server Operators group, or “have been delegated the

appropriate authority, on the local computer”. I would prefer not to

add the user to one of the three groups I mentioned. I have given the

user Read+Execute on the target task. I also gave the user Read (and

even Full Control) to the C:\windows\tasks folder on the server using

CACLS, still no dice. When the user brings up the server via UNC, they

don’t see Scheduled Tasks. I tried running schtasks /query /s serverA,

but the user gets an Access is denied message. I confirmed that the

user can view the scheduled tasks folder when they are a member of the

Backup Operators group, but when they double-click on it, it doesn’t

list the scheduled tasks.

 

How can I go about delegating the proper authority? Is there a group

policy setting in Server 2003 that will allow a user to run a

scheduled task remotely (i.e. \\server, double-click on scheduled

tasks, right-click the task and select Run)? I already tried providing

the user with Log on as a batch job, but that had no impact.

Thanks,

pimy

 

In Windows Help:

To run a scheduled task immediately

1. Open Task Scheduler.

2. Right-click the task that you want to run, and then click Run.

Notes

• To perform this procedure, you must be a member of the

Administrators, Backup Operators, or Server Operators group, or have

been delegated the appropriate authority, on the local computer. As a

security best practice, consider using Run as to perform this

procedure.

• To open Task Scheduler, click Start, point to Settings, click

Control Panel, and then double-click Scheduled Tasks.

• You can also run a scheduled task immediately by selecting a task in

the details pane, and then clicking Run on the File menu

[Guest Jason]

RE: How to allow non-admin to run scheduled tasks remotely?

 

 

 

"pimy103@gmail.com" wrote:

> Server OS: Server 2003 R2

> Client OS: XP Pro SP2

>

> I am trying to allow a non-admin user to run a scheduled task on a

> remote server. According to the Help text, the user must be a member

> of the local Administrators group, the local Backup Operators group,

> the domain Server Operators group, or “have been delegated the

> appropriate authority, on the local computer”. I would prefer not to

> add the user to one of the three groups I mentioned. I have given the

> user Read+Execute on the target task. I also gave the user Read (and

> even Full Control) to the C:\windows\tasks folder on the server using

> CACLS, still no dice. When the user brings up the server via UNC, they

> don’t see Scheduled Tasks. I tried running schtasks /query /s serverA,

> but the user gets an Access is denied message. I confirmed that the

> user can view the scheduled tasks folder when they are a member of the

> Backup Operators group, but when they double-click on it, it doesn’t

> list the scheduled tasks.

>

> How can I go about delegating the proper authority? Is there a group

> policy setting in Server 2003 that will allow a user to run a

> scheduled task remotely (i.e. \\server, double-click on scheduled

> tasks, right-click the task and select Run)? I already tried providing

> the user with Log on as a batch job, but that had no impact.

> Thanks,

> pimy

>

> In Windows Help:

> To run a scheduled task immediately

> 1. Open Task Scheduler.

> 2. Right-click the task that you want to run, and then click Run.

> Notes

> • To perform this procedure, you must be a member of the

> Administrators, Backup Operators, or Server Operators group, or have

> been delegated the appropriate authority, on the local computer. As a

> security best practice, consider using Run as to perform this

> procedure.

> • To open Task Scheduler, click Start, point to Settings, click

> Control Panel, and then double-click Scheduled Tasks.

> • You can also run a scheduled task immediately by selecting a task in

> the details pane, and then clicking Run on the File menu

>

 

When you set up the scheduled task on the client you shoudl get the option

to select which user the task is to be run under. For me I simply select

administrator and punch in the admin password. When the scheduled task runs

it runs with admin permissions.

 

Someone who knows admin credentials needs to set up the task but once this

has been done it should run regardless of who is logged in to the machine.