Discussion Locked

task scheduler, start profile

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

NT4.0 SP6 SBS.
Since ugrading SP scheduler service became task skeduler, and cannot anymore set start profile and rights (I use it in batch operation for a lot of system activity, and need administrator rights) . What is the hint ? Thanks. Mike

7 replies

by beermonster

Hi,
not quite sure what you mean by profile \ rights. The task scheduler runs in the context of the localsystem account. Although it is possible to alter the account that a task runs under, using the basic AT command will schedule a job to run under localsystem which has all of the admin rights you could need.

by mike_m

This is just what I mean. I usually set scheduler to run under profile Administrator (or alternative)(and pwd), to have full control of batch maintainence processes (in particoular network access, R/W, disk$ names etc). Start profile under "task scheduler" is grey, even when logged as administrator, and can't set. So it doesn't fully access the network. I think this happened upgrading to SP6. Thank you.

by curlergirl

This actually happens when you upgrade IE, not the regular NT service pack. Anyway, there's a TechNet article about how to change it back to the regular NT schedule service: Q196731 (if you don't have the CDs, go to www.microsoft.com/technet and look up the article number). Hope this helps!

by beermonster

Ahhh,
I'm with you now. As it was a security risk, task scheduler disabled changing the account that the task scheduler service could run under. it was the oldest trick in the book for a base user to use the AT command to open a command window,which ran under the context of localsystem, and use that to wreak havoc. this was ten times worse if the service was under a domain account. In it's place the task scheduler allows you to specify who the task will run as on a per task basis. i'm nowhere near an NT box at the moment, but i seem to recall that there was a task scheduler applet in control panel that allowed you to config the tasks as required. there should also be a tasks folder somewhere in the system directory which will have an'add task' icon. Hope this makes things a bit clearer

by mike_m

Yes I agree. I am conscious about the security risk, I also used it as RPC several times (at now \\name command). I administer the net, and know whih chances I am taking and where. Will grant answer, didn't try to restore using regedit. Eventually will contact you if this doesn't work). Thank you very much, expecially for the very kind and friendly chat. Mike, Italy

This discussion is closed to new replies.