Task Scheduler - How to to grant non-admin users the permission to view and run a scheduled tasks

Question

We use AD role based access and currently have local groups for all users and admins on a Windows 2016 Server.

The role membership includes AD groups where AD members are added.

Our QA team members are non-administrators and access the QA server using RDP.

The QA team members needs the ability to view and execute the tasks in task scheduler.

I found this article:

For security reasons, a non-administrator user cannot view nor manage a Windows Task Scheduler task that was created by another user.

https://learn.microsoft.com/en-us/windows/win32/taskschd/what-s-new-in-task-scheduler

The below process was attempted, but apparently the above security change removed this ability.

https://www.wincert.net/windows-server/how-to-grant-non-admin-users-permissions-for-managing-scheduled-tasks/

How can we give non-administrators the ability to view and run scheduled tasks using a role?

Answer 1

Try this.

https://www.osdeploy.com/blog/2021/scheduled-tasks/task-permissions

If you want to limit it to the QA Team and not all users, then pick a temp file and set the NTFS permissions for read/execute to the QA Team, and run "cacls /s" to display the SDDL. Put their SID in the script.

Answer 2

@MotoX80
Thank you for the link. I'll take a look.