I tried to create a new task using Task scheduler as the same Domain Administrator user-id (or any other Domain Administrator user-id) I get the following error:
Solved this mystery. We had a conficker infection at the beginning of the year and had created a GPO that modified the permissions on the %systemroot%\tasks folder. I didn't catch it because I had disabled the GPO, but the permissions were already written by the GPO.
In the GPO we configured
Windows Settings
Security Settings
File system
%SystemRoot%\Tasks
Replace existing permission
We then denied rights for all users.
Windows Settings
Security Settings
File system
%SystemRoot%\Tasks
Replace existing permission
We then denied rights for all users.
Quick Solution
Mount the Tasks folder as a
network drive and check the permissions. From the command prompt:
Net Use T: \\%computername%\C$\Window
Open Explorer, right-click Tasks (T:), Properties. Check the Security tab. Grant Administrators and System [x] Full Control, if they do not already have it, and click [Apply]. Then click [Advanced], check [x] Replace permission entries on all child objects, and click [Ok].Restart the "Task Scheduler" service and give it another try.
network drive and check the permissions. From the command prompt:
Net Use T: \\%computername%\C$\Window
Open Explorer, right-click Tasks (T:), Properties. Check the Security tab. Grant Administrators and System [x] Full Control, if they do not already have it, and click [Apply]. Then click [Advanced], check [x] Replace permission entries on all child objects, and click [Ok].Restart the "Task Scheduler" service and give it another try.
No comments:
Post a Comment