Re: HOW ==> Users View Scheduled Tasks on a Server ??

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 01/15/03 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Tue, 14 Jan 2003 21:28:38 -0500

I tend to agree.

It is much safer to change the permissions to let the user restart the
service. You can do this by launching MMC on the server with the service
and adding the "Security Templates" snap-in to create a new template, then
import this template into a security database and then apply that database
by using GPEDIT.MSC aka the group policy snapin. Then, users can either use
the Computer Management MMC to connect to the server [I believe] or use the
NETSVC utility that comes with the Windows Resource kit [which is not free,
but comes free with Technet].

If you insist on being able to let a user manage scheduled tasks, you could
use the RUNAS command on their computer along with a Scheduled task on their
computer to run a script that, for example, executes the NETSVC utility.
However, this can possibly be a security vulnerability, though is probably
safer then letting them wander around Scheduled Tasks and browse out into
Windows Explorer. Info on how to do this:

http://securityadmin.info/faq.htm#runas

"Ricardo M. Urbano - W2K/NT4 MVP" <rmu1@columbiaSPAM.SUCKSedu> wrote in
message news:3E24B653.E5009541@columbiaSPAM.SUCKSedu...
> Do you realize what a security hole that would be if non admins could
> manage scheduled tasks? That why it is not possible. No way around it,
> at least, not AFAIK.
>
> You would have to grant the user at least local admin rights on the
> server in order to be able to manage or even see the scheduled tasks on
> that server.
>
> hth
>
> Arthur wrote:
> >
> > does anyone know of any way at all to allow a domain user to type
> > \\servername and see the scheduled tasks? I have spent numerous hours
trying
> > to figure this out! It is driving me nuts. :( Its all windows 2000 -
both
> > the client and server.
> >
> > What controls the permissions for a user to view scheduled tasks on a
remote
> > machine? I know that administrators can, but what controls it?
> >
> > I have a user that needs to be able to start/restart a FlexLM service on
a
> > server. I created a task that runs as administrator on the server to do
this
> > using the SC.EXE utility. I gave permission on the task to the domain
user.
> > But the domain user still cannot see the "scheduled tasks" folder when
he
> > types in the unc path to the server (\\server). Even using more precise
> > methods: at.exe, jt.exe do not work either.
> >
> > The command:
> >
> > jt.exe /sm \\server /sac mytask.job /rj
> >
> > will run mytask.job on the remote server...but only if you are an admin.
> > Even though I gave permissions on "mytask.job" to the user, he STILL
can't
> > run it remotely.
> >
> > I even used CACLS.EXE to add permissions on the folder C:\winnt\tasks on
the
> > server to modify for the domain user...nope. \\server still wont bring
up
> > the scheduled tasks.
> >
> > C'mon all you experts....surely there is a way to allow a non-admin user
> > just to view tasks on a remote machine??? Help!
>
> --
> Ricardo M. Urbano
> Microsoft Windows 2000/NT MVP

Relevant Pages

  • Re: Missing files/folders
    ... There is no replication software to remote sites or internally in use and ... I was authenticated on TS Server and was working on files on SBS Server. ... I'll check the scheduled tasks and antivirus and keep and look at the audit ... Are the folders/files located on a shared drive or local to the TS server? ...
    (microsoft.public.windows.terminal_services)
  • Re: Application server shuts down
    ... Anything in the Scheduled Tasks? ... Could someone with elevated privileges be remoting into the server to remote ... "Jim Behning" wrote in message ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Grant Object Access
    ... Have you examined the IIS settings for the web app in IIS for differences ... > Now that I had resolved the issues on my test server, ... > "Roger Abell" wrote in message ... >>> has no control over the scheduled tasks in themselves (all the user can ...
    (microsoft.public.windows.server.security)
  • Re: Remote Task Scheduler access problem
    ... The server OS is Windows Server 2003 Standard Edition SP1, ... create or modify scheduled tasks, by using the cacls command to modify the ... the Administrators group to access scheduled tasks, then it saves me a lot ...
    (microsoft.public.windows.server.general)
  • RE: Collect Server Performance Data is taking a long time
    ... Thank you for posting in the SBS newsgroup. ... Please check the Scheduled Tasks log for more info. ... You can also open the properties of the "Collect Server Performance Data" ... I recommend you to reinstall SBS Monitoring component. ...
    (microsoft.public.windows.server.sbs)