question

shahulhameed-4024 avatar image
0 Votes"
shahulhameed-4024 asked IgorK-8991 commented

Task Scheduler

The user account does not have permission to Enable/Disable/Run task Scheduler in Windows server 2019. is there way to run /disable task from user account.(without admin rights)

windows-server-2019
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI shahulhameed-4024

1."Tasks can be launched in a computer account context such as LocalSystem, LocalService, or NetworkService, or they may be launched in a specified user context."
So which type of task do you want to disable on none admin rights user?

2.Could you please share an example about your specified task which you want to disable?

0 Votes 0 ·

I want create scheduled task from user account ,but i am unable to create.so i created scheduled task in admin login now users unable to disable /run .

0 Votes 0 ·
LeonLaude avatar image
0 Votes"
LeonLaude answered JiaYou-MSFT edited

Hi @shahulhameed-4024,

If it's a scheduled task that the non-admin user account has created, he/she can disable it, if it's a scheduled task created by an administrator he/she will need modify permissions to be able to enable/disable scheduled tasks in the Task Scheduler, and that requires administrator rights.


(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)


Best regards,
Leon

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Yes Scheduled task problem is only admin have access to create , if i create from non-admin users i am getting error.i have attached screen shot also

99369-capture.png


0 Votes 0 ·
capture.png (13.2 KiB)
MotoX80 avatar image MotoX80 shahulhameed-4024 ·

What account is being used that the task will run as? For example, if your user is named Testuser, is the task set to execute as the Testuser account?

Are you sure that you are typing in the correct password? On Win10 I got the error message when I typed in the wrong password. for the user.

0 Votes 0 ·

username hameed , i am typing right password

0 Votes 0 ·
Show more comments
DSPatrick avatar image
0 Votes"
DSPatrick answered shahulhameed-4024 commented

Try adding the user read, execute permissions on the task in C:\Windows\Tasks folder

--please don't forget to Accept as answer if the reply is helpful--


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

i have done this same error

0 Votes 0 ·
MotoX80 avatar image
0 Votes"
MotoX80 answered IgorK-8991 commented

Use my UnlockScheduledTask,ps1 script to allow non-admin users to run a task.

https://social.technet.microsoft.com/Forums/windows/en-US/6b9b7ac3-41cd-419e-ac25-c15c45766c8e/scheduled-task-that-any-user-can-run


If you want to allow any user to update the task change this:

  $newSD = $sddl['SDDL'] +  '(A;ID;0x1301bf;;;AU)'          # add authenticated users read and execute

..to this.

  $newSD = $sddl['SDDL'] +  '(A;;FA;;;AU)"'          # add authenticated users full control

I don't know what your task does, but I don't think that I would normally allow users to modify a task that an admin created.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

It works great with AU or single domain user using SID. Did anyone try to do do it with a security group SID?
Cannot get it working.

0 Votes 0 ·
JiaYou-MSFT avatar image
0 Votes"
JiaYou-MSFT answered JiaYou-MSFT edited

HI shahulhameed-4024,

The Task Scheduler belongs to administrative tools on windows server 2019 and these tools are supposed to be used by admins to configure the system. The admin accounts will have full access to these tools while the normal user will have limited access to some of these tools. The access will be restricted for non-admin users. This could be regard as a system design by default for the security consideration. I can also reproduce your issue in my lab.

So do you check if Mr Moto X80 solution can unlock this limitation?
101053-13.png

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.




13.png (15.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.