Run Scheduled Tasks with MSA on 2008R2

Is it actually possible for a scheduled ask to under with an sMSA as opposed to a gMSA?
I have created an sMSA, added it to a server computer running 2008R2 and installed the sMSA. Now running the command
schtasks /CHange /TN taskName /RU
sMSA_Name$ /RP ""
gives error : Logon Failure: unknown username or bad password
Any ideas? Thanks!!

Hi,
Based on my research, Standalone Managed Service Account can only be used to run services, but not to be used to run scheduled tasks on Windows Server 2008 R2.
More information for you:
Using Standalone Managed Service Accounts for Scheduled Tasks
http://blog.simonw.se/using_standalone_managed_service_accounts_for_scheduled_tasks/
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

List all running scheduled tasks on local/remote machine

Hi All,
I'm in need of a PS script, which can list all the active/running scheduled tasks either on local or remote machine.
Please share if you have one readily available.
Thanks in advance!!!
Pavan

Hi Pavan,
Have you checked the script repository? That's a good place to find prewritten scripts:
http://gallery.technet.microsoft.com/scriptcenter
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

Run a scheduled task with pop up message

I have an .hta script that will prompt a user to accept or cancel a shutdown command. I can make a scheduled task via GPO but the popup box never shows on the users desktop if they are logged in...the computer just shuts down. Now, I know this
is because the task is set to run as BUILTIN\System user. How can I make it so the popup window appears for the user?
Windows 2008 R2 and Windows 7
Thanks!

After MS introduced Session 0 isolation, this is impossible on Vista and
newer.
sincerely, Martin
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
The most under-thought thing Microsoft has done. Because of this Session 0, when in a TS session on a Windows 2008 R2 while using Smart Cards authentification and enabling the setting "Disconnect the session when the card is removed"
from the reader, every single time you have a message stating that "Your session was disconnected by an administrator" when you remove the card from the reader. You don't have the same result if in a Windows 2003 R2 TS session, where the session simply disconnects
as it should.
If someone kindly solve this issue mentionned above, it would be the best thing ever happen to me. Because of this "bug", I cannot use smart card authentification on my Windows 2008 RDS cluster.
" Never panic before reboot ! "

Security Violation Error while running schedule task from OIM.

Hi All,
I am getting this error while running a custom java schedule task from OIM:
*Thor.API.Exceptions.tcAPIException [EJB:010160] Security Violation: User '<anonymous>' has insufficient permission to access EJB:*
type=<ejb>,application=Xellerate,module=xlDataObjectBeans.jar,ejb=tcReconciliationoperations,method=createDeleteReconciliationEvent
at Thor.API.Operations.tcReconciliationOperationsClient.createDeleteReconciliationEvent(UnKnown Source).
I got this error as soon as my code start creating Delete Reconciliation Event.
Note: I have already protected the JNDI Namespace.
Please provide some pointers.
Regards,
Sunny

Hi Rajiv,
Check this:
package com.centrica.iam.scheduletask;
import java.io.BufferedReader;
import java.io.File;
import java.io.FileFilter;
import java.io.FileNotFoundException;
import java.io.FileReader;
import java.text.SimpleDateFormat;
import java.util.ArrayList;
import java.util.Calendar;
import java.util.Date;
import java.util.HashMap;
import java.util.Hashtable;
import java.util.Iterator;
import java.util.Set;
import oracle.iam.connectors.common.ConnectorLogger;
import com.thortech.xl.dataaccess.tcDataSet;
import com.thortech.xl.dataaccess.tcDataSetException;
import com.thortech.xl.dataobj.PreparedStatementUtil;
import com.thortech.xl.orb.dataaccess.tcDataAccessException;
import com.thortech.xl.scheduler.tasks.SchedulerBaseTask;
import Thor.API.tcResultSet;
import Thor.API.Exceptions.tcAPIException;
import Thor.API.Exceptions.tcInvalidValueException;
import Thor.API.Operations.tcLookupOperationsIntf;
import Thor.API.Operations.tcReconciliationOperationsIntf;
import Thor.API.Operations.tcSchedulerOperationsIntf;
public class CustomFlatFile extends SchedulerBaseTask {
     private static tcSchedulerOperationsIntf schedulerIntf;
     private static tcLookupOperationsIntf lookupIntf;
     private static tcReconciliationOperationsIntf reconIntf;
     String sObjectName;
     String LookupName;
     String LookupName2;
     String FileDirectory;
     String FileName;
     String File;
     String delimeter;
     String isDeleteTrue;
     HashMap<String, String> attrMap = new HashMap();
     HashMap<String, String> delMap = new HashMap();
     HashMap<String, String> finalMap = new HashMap();
     ArrayList list = new ArrayList();
     public boolean isReconStopped;
     public CustomFlatFile()
          isReconStopped = false;
     public void init()
          LookupName = getAttribute("Attribute Lookup Name");
          FileDirectory = getAttribute("Directory Path");
          FileName = getAttribute("File Name");
          delimeter = getAttribute("Delimeter");
          sObjectName = getAttribute("Resource Object Name");
          isDeleteTrue = getAttribute("Is Delete Allowed");
     public void execute(){
          try {
               System.out.println("Start Exceute");
               //Initiate lookupIntf
               lookupIntf = (tcLookupOperationsIntf)getUtility("Thor.API.Operations.tcLookupOperationsIntf");
               reconIntf=(tcReconciliationOperationsIntf)getUtility("Thor.API.Operations.tcReconciliationOperationsIntf");
               catch (tcAPIException tcapiexception){
                    tcapiexception.printStackTrace();
                    //logger.error(classname, s, tcapiexception.toString());
                    //logger.setStackTrace(tcapiexception, classname, s, tcapiexception.getMessage());
               catch (Exception excep){
                    excep.printStackTrace();
                    //logger.error(classname, s, excep.toString());
                    //logger.setStackTrace(excep, classname, s, excep.getMessage());
               attrMap = readLookup(LookupName);
               System.out.println(attrMap.toString());
               readFile();
               if (isDeleteTrue.equalsIgnoreCase("true"))
                    performDelete();
               System.out.println("Finish Execute");
     public void performDelete()
          System.out.println("Start Perform delete");
          int k = list.size();
          System.out.println("list size " + list.size());
          try
               Thread.sleep(15000);
     /*     Hashtable ahashtable[] = new Hashtable[k];
          Hashtable hashtable = new Hashtable();
          for (int i=0;i<k;i++)
               hashtable.put("User Id", list.get(i));
               ahashtable[i] = hashtable;
               System.out.println(list.get(i));
          Set set = reconIntf.provideDeletionDetectionData(sObjectName, ahashtable);
          System.out.println("Set--" + set.toString());
          tcResultSet tcresultset = reconIntf.getMissingAccounts(sObjectName, set);
          System.out.println("tcresultset - " + tcresultset.getRowCount());
          if (!(tcresultset.isEmpty()))
               long l[] = reconIntf.deleteDetectedAccounts(tcresultset);
               for (int i1=0;i1<l.length;i1++)
                    System.out.println("delete recon key " + l[i1]);
          //Get the existing list of Managed users
               tcDataSet tcdataset = new tcDataSet();
               tcDataSet tcdataset1 = new tcDataSet();
               String query = "select orf.orf_fieldname,prf.prf_columnname, sdk.sdk_name from orf, sdk, pkg, tos, prf, obj " +
                         "where pkg.obj_key = obj.obj_key and pkg.pkg_key = tos.pkg_key and tos.sdk_key is not null " +
                         "and tos.sdk_key=sdk.sdk_key and tos.tos_key=prf.tos_key and prf.prf_iskey='1' and prf.orf_key=orf.orf_key " +
                         "and orf.orf_parent_orf_key is null and obj.obj_name='" + sObjectName + "'";
               tcdataset.setQuery(getDataBase(), query);
               tcdataset.executeQuery();
               String FFName = tcdataset.getString("prf_columnname");
               String FName = tcdataset.getString("sdk_name");
               String ROFName = tcdataset.getString("orf_fieldname");
               System.out.println("form- " + FName + " Field- " + FFName);
               query = "select " + FFName + " from " + FName + " udtable, oiu a, ost b " +
                         "where udtable.orc_key=a.orc_key and a.ost_key=b.ost_key and b.ost_status!='Revoked'";
               System.out.println(query);
               tcdataset1.setQuery(getDataBase(), query);
               tcdataset1.executeQuery();
               int i = tcdataset1.getRowCount();
               ArrayList list1 = new ArrayList();
               String s1 = null;
               System.out.println("N. of rows--" + i);
               for (int j=0;j<i;j++)
                    tcdataset1.goToRow(j);
                    s1 = tcdataset1.getString(0);
                    System.out.println("s1---" + s1);
                    if (!(list.contains(s1)))
                         list1.add(s1);
                         System.out.println("under if--" + s1);
               //Getting the existing list of unmanaged users
               query = "select distinct (b.rcd_value) from rce a, rcd b, orf c, obj d where a.rce_key=b.rce_key and " +
                         "b.orf_key=c.orf_key and c.orf_fieldname='" + ROFName + "' and a.rce_status!='Event Linked' " +
                                   "and a.obj_key = d.obj_key and d.obj_name='" + sObjectName + "'";
               tcdataset1.setQuery(getDataBase(), query);
               tcdataset1.executeQuery();
               i = tcdataset1.getRowCount();
               System.out.println("No. Of Unmanaged Users " + i);
               for (int j=0;j<i;j++)
                    tcdataset1.goToRow(j);
                    s1 = tcdataset1.getString(0);
                    System.out.println("s1---" + s1);
                    if (!(list.contains(s1)))
                         list1.add(s1);
                         System.out.println("under if--" + s1);
               int k1 = list1.size();
               System.out.println("list1 size--" + k1);
               for (int j1=0;j1<k1;j1++)
                    delMap.clear();
                    delMap.put(ROFName, (String)list1.get(j1));
                    System.out.println(delMap.toString());
                    long l = reconIntf.createDeleteReconciliationEvent(sObjectName, delMap);
                    System.out.println("delete recon key--- " + l);
          catch (Exception exception)
               exception.printStackTrace();
     public void readFile(){
          String s = "readFile()";
          //logger.setMethodStartLog(classname, s);
          HashMap map = new HashMap();
          try {
          File = getFile();
          BufferedReader reader = new BufferedReader(new FileReader(new
                    File(File)));
          String line = "";
          int k = attrMap.size();
          String value[] = new String[k];
          String Header[]= new String[k];
          if (delimeter.equalsIgnoreCase("|"))
               delimeter = "\\" + delimeter;
               line = reader.readLine();
               Header = line.split(delimeter);
               while((line = reader.readLine()) != null)
                    value = line.split(delimeter);
                    k = value.length;
                    for (int i = 0;i<k;i++){
                         finalMap.put(attrMap.get(Header), value[i]);
                    System.out.println(finalMap.toString());
                    System.out.println("Start Ignoring Event");
                    if (!(reconIntf.ignoreEvent(sObjectName, finalMap)))
                         System.out.println("Not Ignored");
                    long l1 = reconIntf.createReconciliationEvent(sObjectName, finalMap, true);
                    System.out.println("Recon Key--" + l1);
                    else
                         System.out.println("ignore event ---" + finalMap.toString());
                    list.add(finalMap.get("User Id"));
                    System.out.println(list.size() + "add--" +finalMap.get("User Id") );
                    finalMap.clear();
          catch (Exception exception)
               exception.printStackTrace();
     public boolean stop(){
          String s = "stop()";
          //logger.setMethodStartLog(classname, s);
          //logger.info(classname, s, "Stopping Reconciliation........");
          isReconStopped = true;
          //logger.setMethodFinishLog(classname, s);
          return true;
     FileFilter fileFilter = new FileFilter()
     public boolean accept(File file)
     String sFilePath = file.getName();
     if( sFilePath.startsWith(FileName) )
     return true;
     else
     return false;
     public String getFile() throws FileNotFoundException, Exception{
          String s = "getFile()";
          //logger.setMethodStartLog(classname, s);
          String s1;
          File dir =     new File(FileDirectory);
          File[] files = dir.listFiles(fileFilter);
          if (files.length ==0)
               throw new FileNotFoundException();
          if (files.length>1)
               throw new Exception("Multiple Matches found for this file name");
          s1 = files[0].toString();
          //logger.setMethodFinishLog(classname, s);
          return s1;
     public HashMap readLookup(String s1){
          String s = "readLookup()";
          //logger.setMethodStartLog(classname, s);
          HashMap map = new HashMap();
          try {
          tcResultSet tc1=     lookupIntf.getLookupValues(s1);
          int i = tc1.getRowCount();
          for (int j = 0;j<i;j++){
               tc1.goToRow(j);
               map.put(tc1.getStringValue("Lookup Definition.Lookup Code Information.Code Key"), tc1.getStringValue("Lookup Definition.Lookup Code Information.Decode"));
          catch (tcAPIException tcapiexception){
               tcapiexception.printStackTrace();
               //logger.error(classname, s, tcapiexception.toString());
               //logger.setStackTrace(tcapiexception, classname, s, tcapiexception.getMessage());
          catch (Exception excep){
               excep.printStackTrace();
               //logger.error(classname, s, excep.toString());
               //logger.setStackTrace(excep, classname, s, excep.getMessage());
          return map;

Error while running scheduled task

Im getting this error when I am running a scheduled task for adding all users to a group if they are managers:
Error while running task: Thor.API.Exceptions.tcAPIException: [EJB:010160]Security Violation: User: '<anonymous>' has insufficient permission to access EJB: type=<ejb>, application=Xellerate, module=xlDataObjectBeans.jar, ejb=tcGroupOperations, method=addMemberUser, methodInterface=Remote, signature={long,long}.
any idea?

no luck.
im getting following errors:
updatamanagergroup.java:3: package Thor.API.Operations does not exist
import Thor.API.Operations.*;
^
updatamanagergroup.java:4: package Thor.API does not exist
import Thor.API.tcResultSet;
^
updatamanagergroup.java:5: package Thor.API does not exist
import Thor.API.tcUtilityFactory;
^
updatamanagergroup.java:6: package com.thortech.xl.crypto does not exist
import com.thortech.xl.crypto.tcCryptoUtil;
^
updatamanagergroup.java:7: package com.thortech.xl.scheduler.tasks does not exist
import com.thortech.xl.scheduler.tasks.SchedulerBaseTask;
^
updatamanagergroup.java:8: package com.thortech.xl.util.config does not exist
import com.thortech.xl.util.config.ConfigurationClient;
^
updatamanagergroup.java:13: cannot find symbol
symbol: class SchedulerBaseTask
public class updatamanagergroup extends SchedulerBaseTask
^
and so on....
23 errors
Edited by: user11136275 on Dec 24, 2009 12:22 AM

How to run admin tasks with non-admin account ?

Hello,
The title says it all: I want to allow some non-administrative accounts to run admin tasks which must be run as root.
A solution would be to use 'sudo' and give rights to those non-admin accounts on the binaries used by the tasks. But I notably use 'chmod' and 'chown' in those tasks, and I would not want to give to non-admin accounts rights to run those commands as root outside the admin task scripts. But from my understanding of 'sudo', if I do it, non-admin accounts will be able to use chmod and chown outside the scripts. Is this right ?
The sid bit could have been a solution I think, but sadly it is not supported on Mac OSX 10.5.
Thanks

I am trying to use the sudo route add command in a script, which should run as part of a vpn connection config file. I get an unable to run script error in the log.
I searched and found the following older discussion
http://discussions.apple.com/thread.jspa?messageID=1986808
I tried that but I get a syntax error when trying to save the sudoers file I chose to save anyway.
Tried to run the command from the terminal and got the following error
postdrop warning: unable to look up public/pickup:no such file or directory.
Can you give me an example of your sudoers file with the correct syntax etc.
Thanx

Running scheduled tasks even if their time is missed?

Hi
I have some tasks (e.g. iSync-ing to my mobile phone) which I need to schedule periodically, but would like them to run (albeit in a delay) if my Mac happens to be off at the time of their scheduled run.
Both cron and launchd jobs seem to ignore a job that is overdue and hasn't been run.
Is there some tool or workaround that can run missed jobs as soon as the Mac wakes up or goes online (if the job requires internet access)?
Thanks

Hey pooleking,
I'd start the troubleshooting with your iPod. You can find some basic steps to start with here:
iPod troubleshooting basics and service FAQ
http://support.apple.com/kb/TS1382
Take care,
David

Running without Adobe Flash Player Updater Scheduled Task

I'm trying to understand how to avoid installing Adobe Flash Player Updater Scheduled Task.
I am also unable to remove the Scheduled Task using a script that works on other tasks, on the same workstations.
Is there an mms.cfg setting that will instruct the installer to skip the Task?
1) Uninstall the Scheduled Task from all workstations in my environment.
2) Install future updates without the Scheduled Task.
I have already tried mm.cfg with these lines:
AutoUpdateDisable=1
SilentAutoUpdateEnable=0
It still runs the update process every hour.
I have explained that it hasn't been causing a problem, but running this many processes on so many computers for no reason is causing some concern.
My organization also does not allow big bang automation included with this product.
Has anyone managed to shut off the Updater process from running?
Thank you

Hi Ethan,
try creating an MST file, with Fx, Wise package studio...
Edit the CustomAction “NewCustomAction1” added the parameter “-au 2” to the Command line argument.
you should do that for both:
install_flash_player_11_active_x.msi
and
install_flash_player_11_plugin.msi
If you are using both of them..
Or you can delete the scheduled task with schtask /delete "taskname"
Br Jens

[Forum FAQ] Group Policy Preferences Scheduled Tasks Item not working when the option Run whether user is logged on or not is selected

Scenario:
We use one of the following Group Policy Preferences Scheduled Tasks item to deploy a task to clients:
Computer Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Scheduled Task (At least Windows 7)
Computer Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Immediate Task (At least Windows 7)
User Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Scheduled Task (At least Windows 7)
User Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Immediate Task (At least Windows 7)
(Note that on some platforms, "At least Windows 7" is replaced with "Windows Vista and later.")
After designating a user account to run the task, we select “Run whether user is logged on or not” option, and “The Do not store password…”
check box is automatically grayed out (See Figure 1).
Figure 1
After finishing configuring the task item, on a client, we run command
gpupdate/force to forcefully update group policy. However, on the client, when we check if the task is listed in Task Scheduler snap-in, the task is not displayed, and when we run
gpresult/h report.html to collect group policy result for troubleshooting, we see an error as similar as shown in the following figure (Figure 2).
Figure 2
Cause:
To make the scheduled task run whether the user is logged on or not, we need to store the password of the designated user account. However, for the content of the scheduled
task item is stored in Sysvol where it’s not safe to store passwords, this function has been deprecated.
Workaround:
We can run the task with system account
NT Authority\System, or we can use specific user accounts to run the task when the given user is logged on. (See Figure 3)
Figure 3
Reference:
MS14-025: Vulnerability in Group Policy Preferences could allow elevation of privilege: May 13, 2014
http://support.microsoft.com/kb/2962486
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Hello Everyone,
Succeeded !!!!!!!
Even i was struggling with this same Problem to execute a batch via Window scheduler and set the setting to "Run whether the user is logged in or not".
I tried many time but the batch runs with " Run
whether user is logged on" and not with "Run
whether user is logged on or not".
what i discovered is that there was one mapped drive
path in my batch file which was not the complete path like y:/AR.qvw actually what i did i changed that map path to the complete path like \\servnamename\d$\AR.qvw and the batch executed successfully with the setting "Run
whether user is logged on or not"
The
conclusion is that check the dependency of the script on external resources because when you check this option "Run
whether user is logged on or not" It actually conflicts. This my discovery.
If
you have any question write me on [email protected]
Thanks
& Regards,
Arun

Powershell commands won't run in Task Scheduler

On a Windows 2008 R2 member server (Win 2003 domain), I can run a batch file like this on command line:
"powershell.exe -noexit -noprofile -executionpolicy Unrestricted -file C:\Bin\Scripts\BitsTransfer-Server05.ps1"
However, the batch file fails as a scheduled task, with following error:
"Start-BitsTransfer : The operation being requested was not performed because the user has not logged on to the network. The specified service does not exist."
The job is scheduled under a service account which is a member of Domain Admin group. And, yes, I have checked "Run whether user is logged on or not" and "run with highest privileges". Logging on as that account to the server did not make a difference.
I am able to run the scheduled jobs on other servers with the same account and same configuration without a problem. Thanks for any help.
Jay Kulsh

Jay
Although you may have already found a resolution to your issue, I'm still going to post this note to benefit someone else. I ran into a similar issue.
I basically used a different domain account to test and the task ran just fine. A couple of things to keep in mind and make sure of:
1. The account being use to execute task must have "Logon as batch job"
rights under the local security policy of the server. You must specified the account you need to run scripts/bat files.
2. Make sure you are entering the correct password characters
3. Tasks in 2008 R2 don't run interactively specially if you run them as "Run whether user is logged on or not". This will likely fail specially if on the script
you are looking for any objects\resource specific to a user-profile when the task was created as the powershell session will need that info to start, otherwise it will start and immediately end.
Example for $Path:
mapped drive (\\server\share) x:\ vs. Actual UNC path \\server\share
4.
Review your steps, script, arguments. Sometimes the smallest piece can make a big difference even if you have done this process many times. I have missed several times a character on the password or a semi-colon sometimes.
Check the link provided and hopefully you or someone else can benefit from this info. Be safe.
https://technet.microsoft.com/en-us/library/cc722152.aspx

Contiunous running programs: Thread.sleep vs. Scheduled Tasks

Hello,
I have simulation programs that should run continuously for weeks at a time. I am seeking any advice or comments on the best way to do something like this.
Some programs run every 30 seconds; others run once per hour; others run once per day. These programs involve simulating the use of a popular website by reading web pages and inserting records into Oracle 9i databases.
As far as the "every 30 seconds" program, I use Thread.sleep to pause the program for each interval. Is this a good method?
What about programs running once per hour or per day? I have used the Windows XP Scheduled Task program to execute the program. Is this a good method?
Does anybody know of a better way to do such things?
Any comments or helpful links are greatly appreciated.
Thank you,
Logan

I have simulation programs that should run
continuously for weeks at a time. I am seeking any
advice or comments on the best way to do something
like this.If you have a simulator, does it have to simulate time on a one to one basis. Could it not simulate 30 seconds, every 3 seconds and thus not need to run for the full week. If you have to run in real time, what are you simulating.
Some programs run every 30 seconds; others run once
per hour; others run once per day. These programs
involve simulating the use of a popular website by
reading web pages and inserting records into Oracle
9i databases.
As far as the "every 30 seconds" program, I use
Thread.sleep to pause the program for each interval.
Is this a good method?No. Sleep for 30 seconds just means there is atleast 30 seconds delay from the end of the last task to the start of the next task. This could means every 30.1 seconds or even every 33 seconds depending on how long the task takes to run.
If you create a single ScheduledExecutorService you can run a task with any period you suggest with a dynamic number of threads.
e.g.
Execuotrs.newScheduledThreadPool(1);
>
What about programs running once per hour or per day?See previous.
I have used the Windows XP Scheduled Task program to
execute the program. Is this a good method?If it is a couple of times per day or per week this is a good choice.
>
Does anybody know of a better way to do such things?see previous.

ColdFusion 11 Scheduled Task & IIS 7.5

I have a scheduled task registered in ColdFusion 11 Admin console. ColdFusion 11 is hosted over IIS 7.5. The schedule task is to run 1 perticular file from sub application of the main app. After upgrading application from ColdFusion 9 to ColdFusion 11, scheduled task stopped working.
Note that, on IIS, main App has "Anonymous Authentication - Disabled" and "Windows Authentication - Enabled" ...
While for sub app (which is being called by scheduled task) has "Anonymous Authentication - Enabled" and "Windows Authentication - Disabled".
Moreover, when I try to run the scheduled task manually, it shows "Authentication falure" error in log file as
HTTP Error 401.2 - Unauthorized You are not authorized to view this page due to invalid authentication headers.
Any help would be greatly appriciated.
Thank you.

I've been fighting the identical problem since upgrading from CF8 on Windows Server 2008R2 with SSL enabled. The main CF application's folder is set for Windows Authentication This is happening on two different test servers- one running CF10 and the other running CF11, both of which had been running CF8 tasks with no problems. IIS settings for the subfolder with the scheduled task have only Anonymous authentication enabled (which is set to use the Application Pool identity that the Application Pool's identity is set to). I've set the file system permissions to allow Everybody, as well as IUSR, on the .CFM in question, and have tried using both HTTP and HTTPS forms of the URL in the scheduled task settings.
I can use the same HTTP/HTTPS URL in a browser directly (without authenticating to the server's application first) and the .CFM runs flawlessly. The CF http.log file shows Status Code=401, and saving the scheduled task output shows "IIS 7.0 Detailed Error - 401.2 - Unauthorized". What has changed in CF10 and CF11 if the underlying IIS server settings that worked before haven't changed?
Thanks,
Myron

Group Policy - Computer preference - Schedule task creation

Hello,
We are getting error while applying schedule task creation GPO (from Windows 2012) to system windows 2008 R2.
Group Policy object did not apply because it failed with error code '0x80041316 The task XML contains an unexpected node.' This error was suppressed.
As recommended in many threads, we have made the settings to run the schedule task with user which is "NT Authority\System" (selected user manully from Damain -> Building group -> System). After changing, we observe that task is getting
created but we keep on getting warning messages in event viewer. In GPO -> schedule task -> setting is to "update" schedule task (not create or replace).
Below is excerpt from traces file while applying GP.
-------2015-02-11 09:41:22.976 [pid=0x35c,tid=0x934] RunOnce value created [SUCCEEDED(S_FALSE)]
2015-02-11 09:41:23.039 [pid=0x35c,tid=0x934] RunOnce value created [SUCCEEDED(S_FALSE)]
2015-02-11 09:41:23.039 [pid=0x35c,tid=0x934] RunOnce value created [SUCCEEDED(S_FALSE)]
2015-02-11 09:41:23.039 [pid=0x35c,tid=0x934] Read GPE XML data file (3146 bytes total).
2015-02-11 09:41:23.039 [pid=0x35c,tid=0x934] RunOnce value created [SUCCEEDED(S_FALSE)]
2015-02-11 09:41:23.070 [pid=0x35c,tid=0x934] RunOnce value created [SUCCEEDED(S_FALSE)]
2015-02-11 09:41:23.085 [pid=0x35c,tid=0x934] Properties handled. [ hr = 0x80041316 "The task XML contains an unexpected node." ]
2015-02-11 09:41:23.085 [pid=0x35c,tid=0x934] Error suppressed. [ hr = 0x80041316 "The task XML contains an unexpected node." ]
2015-02-11 09:41:23.085 [pid=0x35c,tid=0x934] Completed get next GPO. [SUCCEEDED(S_FALSE)]
2015-02-11 09:41:23.085 [pid=0x35c,tid=0x934] WQL : SELECT * FROM RSOP_PolmkrSetting WHERE polmkrBaseCseGuid = "{AADCED64-746C-4633-A97C-D61349046527}"
2015-02-11 09:41:23.101 [pid=0x35c,tid=0x934] Purged 2 old RSoP entries.
2015-02-11 09:41:23.101 [pid=0x35c,tid=0x934] Logging 2 new RSoP entries.
2015-02-11 09:41:23.101 [pid=0x35c,tid=0x934] RSoP Entry 0
2015-02-11 09:41:23.117 [pid=0x35c,tid=0x934] RSoP Entry 1
2015-02-11 09:41:23.117 [pid=0x35c,tid=0x934] Completed get GPO list. [SUCCEEDED(S_FALSE)]
Any input will be helpful.
Thank you.

Hi Martin,
Please find it below
<?xml version="1.0" encoding="UTF-8"?>
-<ScheduledTasks clsid="{CC63F200-7309-4ba0-B154-A71CD118DBCC}">-<TaskV2 clsid="{D8896631-B747-47a7-84A6-C155337F3BC8}" removePolicy="0" userContext="0" uid="{1E0044F0-305A-48ED-A432-DDF4E5AB50BC}"
changed="2015-02-11 09:07:27" image="2" name="AssetExplorer">-<Properties name="AssetExplorer" logonType="S4U" runAs="NT AUTHORITY\System" action="U">-<Task version="1.2">-<RegistrationInfo><Author>domain2\useradmin</Author><Description>Asset
Explorer</Description></RegistrationInfo>-<Principals>-<Principal id="Author"><UserId>NT AUTHORITY\System</UserId><LogonType>S4U</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>-<Settings>-<IdleSettings><Duration>PT5M</Duration><WaitTimeout>PT1H</WaitTimeout><StopOnIdleEnd>false</StopOnIdleEnd><RestartOnIdle>false</RestartOnIdle></IdleSettings><MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy><DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries><StopIfGoingOnBatteries>false</StopIfGoingOnBatteries><AllowHardTerminate>false</AllowHardTerminate><AllowStartOnDemand>false</AllowStartOnDemand><Enabled>true</Enabled><Hidden>false</Hidden><ExecutionTimeLimit>P1D</ExecutionTimeLimit><Priority>7</Priority></Settings>-<Triggers>-<CalendarTrigger><StartBoundary>2015-02-05T23:00:00</StartBoundary><Enabled>true</Enabled>-<ScheduleByDay><DaysInterval>1</DaysInterval></ScheduleByDay><ExecutionTimeLimit>P1D</ExecutionTimeLimit></CalendarTrigger></Triggers>-<Actions
Context="Author">-<Exec><Command>\\domain\NETLOGON\Global\mycommand.cmd</Command></Exec></Actions></Task></Properties></TaskV2> -<TaskV2 clsid="{D8896631-B747-47a7-84A6-C155337F3BC8}"
removePolicy="0" userContext="0" uid="{0C27559B-07A6-4F36-A400-0D769B62BE93}" changed="2015-02-11 09:16:50" image="2" name="AssetExplorer">-<Properties name="AssetExplorer" logonType="S4U"
runAs="NT AUTHORITY\System" action="U">-<Task version="1.1">-<RegistrationInfo><Author>domain2\useradmin</Author><Description>Asset Explorer</Description></RegistrationInfo>-<Principals>-<Principal
id="Author"><UserId>NT AUTHORITY\System</UserId><LogonType>S4U</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>-<Settings>-<IdleSettings><Duration>PT5M</Duration><WaitTimeout>PT1H</WaitTimeout><StopOnIdleEnd>false</StopOnIdleEnd><RestartOnIdle>false</RestartOnIdle></IdleSettings><MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy><DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries><StopIfGoingOnBatteries>false</StopIfGoingOnBatteries><AllowHardTerminate>false</AllowHardTerminate><AllowStartOnDemand>false</AllowStartOnDemand><Enabled>true</Enabled><Hidden>false</Hidden><ExecutionTimeLimit>P1D</ExecutionTimeLimit><Priority>7</Priority></Settings>-<Actions
Context="Author">-<Exec><Command>\\domain\NETLOGON\Global\mycommand.cmd</Command></Exec></Actions>-<Triggers>-<CalendarTrigger><StartBoundary>2015-02-05T23:00:00</StartBoundary><Enabled>true</Enabled>-<ScheduleByDay><DaysInterval>1</DaysInterval></ScheduleByDay><ExecutionTimeLimit>P1D</ExecutionTimeLimit></CalendarTrigger></Triggers></Task></Properties></TaskV2>
</ScheduledTasks>

Scheduled Tasks - Administrator Best Practices

Hi all,
I've gotten assistance this week with a couple scripts and scheduling them as tasks. I actually have well over a dozen running on our Exchange server using a special user with a complex password. This user is not used for logging into any machine, but it
is a member of 'Administrators' group and can be used for tasks requiring elevated privileges.
What I am interested in learning is what the best practice is for running scheduled tasks. We have several, such as querying AD for members of select OUs or users who meet certain criteria. We also have automated emails regarding certain mailbox metrics,
etc. You get the idea.
Despite the complex credentials, this account is still discoverable and could be used in nefarious ways. Is it possible be running tasks on Server 2008 R2 (2012 possibly) without administrator credentials? Are there certain restrictions for the tasks (like
is a scheduled reboot allowed by a standard account, but not querying Active Directory?).
I also have noticed a checkbox with 'Run with highest privileges' and do not fully understand what this means.
When I try to run the task as a regular user (no remote permissions) and it says 'Logon failure: the user has not been granted the requested logon type as this computer.'
In short, can I safely remove our special user account from 'Administrators' and place into regular users without breaking all of our tasks?

Hi KSI-IT,
Firstly, based on my research, if you want to run the task scheduler with a user account, the user account must have the corresponding permission, in other words, you can also manually run the script with the user account.
1. For the error you posted 'Logon failure: the user has not been granted the requested logon type as this computer', please make sure the task account has "logon as a batch job" privilege.
To add the privilege of the account, please go to
[Local Security policy\Local Policies\User Rights Assignment]
-Log on as a batch job.
Add the domain\username account and any others you may need and retry.
2. For the setting 'Run with highest privileges', this means that it runs with the highest privileges available to that user. This is different from the context menu's 'Run As Admin'.
It generates the highest privilege token for the specific user, however, it cannot run as a different user, for a standard user with no elevated permissions, 'Run with highest privileges' does not do anything.
Reference from:
What
effect does "run with highest priviledges" in task scheduler have on powershell scripts?
I hope this helps.

CF 9 Upgrade process Ran All Scheduled Tasks

I just completed the upgrade process from CF8 Enterprise to CF9 Enterprise on our test system, Windows 2003 R2P2 using IIS6 and SQL Server 2000. I have no schedule tasks with an active schedule, but the upgrade process ran all of the tasks. Running all of the scheduled tasks created 200+ e-mails.
Any ideas on what happened? I ran the coldfusion_9_wwe_win.exe and installed the CF9 ODBC and CF9 SOIR services.
If this happened on my TEST system (with no actively scheduled tasks) what's going to happen when I upgrade my production system?
Thanks in advance for your time.
Libby

I can't answer your specific question (*), but I would seriously reconsider your approach of UPGRADING a CF server. Set up CF9 in parallel, and migrate the application/website across to it.
If you do an inline upgrade and it fails: you've got nothing to fall back on. If you to a "cross-grade", your working CF8 instance is still there as a fail-over, if anything goes wrong with the CF9 install.
Adam
(*) you might want to raise a bug report, though.

Run Scheduled Tasks with MSA on 2008R2

Similar Messages

Maybe you are looking for