Add/Remove Scheduled Task function

[NewsArchive]

> Friedrich - But what is this "Run with highest privileges!" - see screen
> shot from scheduled task manager.

If an user enables the "Run with highest privileges" option then Task
Scheduler will run the specific task using an elevated privileges token
rather than a least privileges token. But only tasks that require elevated
privileges to complete their actions should run with elevated privileges.
So do you have a low-level system tool that needs elevated privileges?

It doesn't mean you should try to enable the "Run with highest privileges"
Task Scheduler option for an application that you distribute to your
customers! Sure, you can do it for your own in-house applications, but
never ever open a security hole on your customers' machines.

Friedrich

[NewsArchive]

BTW, if you really have to do this (for whatever unknown reason), you can
try to use something like the following from the Run Command Line function:

schtasks /create /tn mytaskname /tr myapp.exe /SC ONLOGON /RL highest

I do not recommend it! It's just FYI.

Friedrich

[NewsArchive]

Friedrich, Dirk

>But the problem is - the program require administrator. My information said
>that only a scheduled task can do that.

A valid reason to run a scheduled task as Administrator or some specific
user is if the task has to access a network resource available only to that
user.

I've used SB to call the command "schtasks.exe" (available I think in
Windows XP and newer) to create a scheduled task with a particular user and
password. There is an "ONLOGON" option.

Details: http://ss64.com/nt/schtasks.html

Carlos Gutierrez

[NewsArchive]

Question: How can I determine whether a certain task has been already
integrated?

Dirk Büchel

[NewsArchive]

Dirk,

> Question: How can I determine whether a certain task has been already
> integrated?

What you can try to do is to check the Registry.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Schedule\TaskCache\Tree\<YourTas kName>

Friedrich

[NewsArchive]

"highestAvailable" confuses many people.

As I understand it, it means exactly what it says.

Suppose, for example, somebody has permissions as a Backup Operator, Power
User, Server Operator, or whatever (depends on the operating system as to
what are available). But he is not an Administrator.

requireAdministrator will fail unless he gets an over-the-shoulder
authorization from somebody who is an Administrator.

highestAvailable will try the existing user's unrestricted token (with his
Backup Operator or whatever other privileges) and run the application at
that level.

Jane