Re: HOW ==> Users View Scheduled Tasks on a Server ??

From: Arthur (sirarthur1spammfilter@earthlink.net)
Date: 01/15/03 

From: "Arthur" <sirarthur1spammfilter@earthlink.net>
Date: Wed, 15 Jan 2003 03:47:08 GMT

 why would it be a security hole? I am not talking about managing
tasks...only running one task. All tasks have an ACL associated with them.
I set the task to allow this user to run (just one task.) He cant change
them anyway because he would need to re-type the domain admin password (the
task is set to run under a domain admin account which he does not know).

i see no risk at all in just lettting him VIEW the scheduled tasks!

.

"Ricardo M. Urbano - W2K/NT4 MVP" <rmu1@columbiaSPAM.SUCKSedu> wrote in
message news:3E24B653.E5009541@columbiaSPAM.SUCKSedu...
> Do you realize what a security hole that would be if non admins could
> manage scheduled tasks? That why it is not possible. No way around it,
> at least, not AFAIK.
>
> You would have to grant the user at least local admin rights on the
> server in order to be able to manage or even see the scheduled tasks on
> that server.
>
> hth
>
> Arthur wrote:
> >
> > does anyone know of any way at all to allow a domain user to type
> > \\servername and see the scheduled tasks? I have spent numerous hours
trying
> > to figure this out! It is driving me nuts. :( Its all windows 2000 -
both
> > the client and server.
> >
> > What controls the permissions for a user to view scheduled tasks on a
remote
> > machine? I know that administrators can, but what controls it?
> >
> > I have a user that needs to be able to start/restart a FlexLM service on
a
> > server. I created a task that runs as administrator on the server to do
this
> > using the SC.EXE utility. I gave permission on the task to the domain
user.
> > But the domain user still cannot see the "scheduled tasks" folder when
he
> > types in the unc path to the server (\\server). Even using more precise
> > methods: at.exe, jt.exe do not work either.
> >
> > The command:
> >
> > jt.exe /sm \\server /sac mytask.job /rj
> >
> > will run mytask.job on the remote server...but only if you are an admin.
> > Even though I gave permissions on "mytask.job" to the user, he STILL
can't
> > run it remotely.
> >
> > I even used CACLS.EXE to add permissions on the folder C:\winnt\tasks on
the
> > server to modify for the domain user...nope. \\server still wont bring
up
> > the scheduled tasks.
> >
> > C'mon all you experts....surely there is a way to allow a non-admin user
> > just to view tasks on a remote machine??? Help!
>
> --
> Ricardo M. Urbano
> Microsoft Windows 2000/NT MVP

Relevant Pages

  • Re: ISA and RWW
    ... now when I type in mail.company.com/exchange or remote I am directed to ... because they are running ISA". ... in the previous admin. ... in a single server enviornment and I have never used ISA in any of the ...
    (microsoft.public.windows.server.sbs)
  • Re: asp.net remote [hosted] configuration usse
    ... That includes machine admin rights. ... to manipulate the that one site, one of many on a remote PC running Win2k3. ... The FrontPage Server Extensions Access Method ... Create an account on the remote Web Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Missing files/folders
    ... There is no replication software to remote sites or internally in use and ... I was authenticated on TS Server and was working on files on SBS Server. ... I'll check the scheduled tasks and antivirus and keep and look at the audit ... Are the folders/files located on a shared drive or local to the TS server? ...
    (microsoft.public.windows.terminal_services)
  • Re: Help me add a client from remote with SBS 2003
    ... We have a local group admin user called HPFuser01. ... I am the onw with Server admin rights and rights over the domain. ... I'm remote but can log into the SBS server as administrator. ... Houston is plugging in a New Workstation with Vista Business ...
    (microsoft.public.windows.server.sbs)
  • remote access trouble
    ... I have server 2003 set up on a testing system, as you know, I have it set up ... I add the user to the remote desktop users group AND assign the right to ... Now the admin has no rights to access the computer remotely....at all. ...
    (microsoft.public.windows.server.active_directory)