I have a large number of scheduled tasks on a MS 2016 server, and I need to change them all to run using a gMSA, instead of a standard account. I tried running the following, which worked, but I cannot figure out how to keep "Run whether user is logged in or not" selected. schtasks /change /TN \taskname /RU DOMAIN\gmsaAccountName /RP Run with highest privileges stays checked, but "Run whether user is logged in or not" changes to "run only when user is logged on" I can recreate the task in PowerShell, and the setting is correct, but I am trying to avoid having to recreate all my tasks again from scratch, if there is a way to just use the schtasks /change command instead. Appreciate any guidance on this.

You need to create a new principal for the scheduled task. Something like this: $p = New-ScheduledTaskPrincipal -UserId DOMAIN\gmsaAccountName -LogonType Password Get-ScheduledTask <taskname>| Set-ScheduledTask -Principal $p

gmsa scheduled task - run whether user is logged on or not

Accepted answer

Rich Matheisen 45,091 Reputation points

2021-10-29T20:10:56.763+00:00
You need to create a new principal for the scheduled task. Something like this:

$p = New-ScheduledTaskPrincipal -UserId DOMAIN\gmsaAccountName -LogonType Password Get-ScheduledTask <taskname>| Set-ScheduledTask -Principal $p
Please sign in to rate this answer.
howbs2002 106 Reputation points

2021-10-29T21:48:34.227+00:00

Thanks for taking the time to reply.

Something I am doing with your code doesn't allow me to pipe in and keeps prompting for taskname instead:

Cmdlet Set-ScheduledTask at command pipeline position 2
Supply values for the following parameters:
TaskName:

I tried Get-ScheduledTask "mytaskname" |

and Get-ScheduledTask -TaskName "mytaskname" |

I will have a play over the weekend, and see if I can figure out what I am missing.

Rich Matheisen 45,091 Reputation points

2021-10-30T01:13:51.21+00:00

Try running the script in an elevated PowerShell session (i.e. "Run as administrator")

howbs2002 106 Reputation points

2021-11-01T16:25:09.887+00:00

Yeah, it's definitely not that.

Rich Matheisen 45,091 Reputation points

2021-11-01T18:54:38.567+00:00

You might want to try something like this (using your task's name, of course):

$x = (Get-ScheduledTask).TaskName $x -contains "ProcessMemoryDiagnosticEvents" # look for the whole name $x | where-object {$_ -like "ProcessMemory*"} # look for a partial name

Use variations of the string in the "-like" example: a wildcard at the front and back, a shorter string, just the first character of the task name, etc.

If it doesn't show up try from an elevated PowerShell session. If it still doesn't show up, verify the spelling by using the task manager GUI.
Sign in to comment

gmsa scheduled task - run whether user is logged on or not

0 additional answers