No announcement yet.

Scheduled Task Permission Audit

  • Filter
  • Time
  • Show
Clear All
new posts

  • Scheduled Task Permission Audit

    I have recently taken over managing a domain, and we are coming up on a SOX audit. The auditors have asked for a listing of all users on the domain that have permissions to edit or create a scheduled task on the servers. I know by default the groups that have these permissions but was curious if there might be a place where these permissions could have been granted to another group or person other than the defaults?

  • #2
    Re: Scheduled Task Permission Audit

    Yes, it can be changed using group Premissions on the C:\windows\Tasks (Or C:\Windows\System32\Tasks if 2003) folder.

    Here is the MS link
    Thats for 2003, but you get the idea.

    If in asking for more details about a problem I seem to be rude, think about it this way, If I did not have to ask, I would not of been forced to be rude.

    Please assume anything and everything I say to be wrong unless I have provided links and evidence, or you have done the same.
    IE: you blow your server up following my advice, not my bad

    A OP is bad if I can go to and answer the question by pressing 4 buttons. "Ctrl +c, Ctrl +v".


    • #3
      Re: Scheduled Task Permission Audit

      You will also want to review user rights
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd

      ** Remember to give credit where credit is due and leave reputation points where appropriate **