Group policy 'Prohibit New Task Creation’ is applied and the gpo has 'won' but a standard user can still create a scheduled task

Question

Hi, I've had a need to prevent standard users from creating scheduled tasks in Windows

In GPEdit.msc , I've set the policy 'Prohibit New Task Creation’ to enable for both user and computer policy, ran gpupdate /force, rebooted and verified with gpresult that the policy has 'won' so isn't being superseded, however on both domain and non domain joined Windows 11 machines, a standard user is still able to create a scheduled task. The other prohibit / hide / prevent policies within both Computer and user configuration > Administrative Templates > Windows Components > Task Scheduler also don't seem to take affect / be enforced despite the GPO Winning

***moved from Windows / Windows 11 / Settings***

Answer 1

Hi Laura_468,

Thank you for posting in the Microsoft Community Forums.

I. Confirm policy settings

Check the policy location:

Ensure that you have set the Disable Creation of New Tasks policy in both Computer Configuration and User Configuration, and that it is set to Enabled. Enabled” in both Computer Configuration and User Configuration.

Check the policy priority:

If there are multiple Group Policy Objects (GPOs), verify that the higher priority GPO contains the required settings.

Verify the policy application:

Use the gpresult command to view the policy result set and verify that the policy has been correctly applied to the target computer or user.

Second, check other related policies

Task Scheduler policy:

In Computer Configuration and User Configuration, Windows Components > Task Scheduler > Administrative Programs “Under Computer Configuration and User Configuration, Windows Components > Task Scheduler > Administrative Templates, check if there are any other related policies that may override the Disable Creation of New Tasks policy.

In particular, check whether the policies “Prohibit users from configuring scheduled tasks” and “Disable Task Scheduler” are set and in effect.

Other security policies:

Check whether there are other security policies (such as user rights assignment) that may allow standard users to create scheduled tasks.

Check system privileges and settings

User privileges:

Verify that standard users have sufficient privileges to create scheduled tasks. Usually, only administrators and members of user groups with appropriate permissions can create scheduled tasks.

Task Scheduler Folder:

Check the permission settings of the Task Scheduler folder to ensure that standard users do not have write or modify permissions.

Best regards

Neuvi

Answer 2

Hi Neuvi,

Thank you for confirming the elements which should be set / conflicts looked out for.

Unfortunately there's nothing new here that I haven't already gone over.

Even on a separate non domain joined Windows 11 where no policy has been altered previously.

I'd be interested to know whether anyone is able to re-create the condition to see whether it applies for them.

I'll keep trying, many thanks

Laura