In a high-security environment, Task Scheduler can pose a security threat. Users can create new tasks or delete those that are set to run by the administrator. If you are an administrator, you can control this behavior to provide greater security and ensure that only the tasks that you configure run at the proper time. This article describes how you can prevent users from scheduling tasks.
- Click Start, point to Programs, point to Accessories, point to System Tools, and then click Scheduled Tasks.
- Right-click the task on which you want to set permissions, click Properties, and then click the Security tab.
- Click Advanced, click the user or group for whom you want to set permissions, and then click View/Edit.
- Assign the appropriate permissions.
- Create or edit the applicable group policy.
For example, if you want this policy to be a domain-wide policy, use the following procedure:
- Click Start, click Administrative Tools, and then click Active Directory Users and Computers.
- Right-click the domain name, click Properties, and then click the Group Policy tab.
- Click the default domain policy, and then click Edit to open the Group Policy console.
- In the left pane of the Group Policy console, click to expand the User Configuration node.
- Click to expand Administrative Templates, and then click to expand Windows Components.
- Click Task Scheduler.
- In the right pane, double-click Disable New Task Creation.
NOTE: To prevent users from deleting scheduled tasks, double-click Disable Task Deletion.
- By default, this policy is not configured. To configure it, click Enabled, and then click OK.
This policy is displayed in the Computer Configuration and User Configuration folders. If both policies are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.
NOTE: This policy does not prevent administrators of a computer from using At.exe to create new tasks or from submitting tasks from remote computers.
ID articol: 310208 - Ultima examinare: 30 oct. 2006 - Revizie: 1