{
	"id": "7fa51b56-932c-4891-b398-6b81308c68d4",
	"created_at": "2026-04-06T00:16:41.018838Z",
	"updated_at": "2026-04-10T13:11:20.262017Z",
	"deleted_at": null,
	"sha1_hash": "df0a90ce40dbd7bda4a8eb7bbc0f3e88c0d775af",
	"title": "Task Scheduler and security: Management Services",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 38131,
	"plain_text": "Task Scheduler and security: Management Services\r\nBy Archiveddocs\r\nArchived: 2026-04-05 14:52:44 UTC\r\nApplies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server\r\n2003 with SP2\r\nTask Scheduler and security\r\nWhen creating a scheduled task, you must enter a user name and password, either in the Add Scheduled Task\r\nWizard or in the Run as box in the Task tab of the scheduled task's property dialog box. When the scheduled task\r\nruns, the program you've scheduled runs as if it were started by the user you specified, with that user's security\r\ncontext. For example, if the user specified for a scheduled task is a member of the Backup Operators group on the\r\nlocal computer, the program specified in the scheduled task file runs as if a member of the Backup Operators\r\ngroup is logged onto the local computer. If another user is logged on to the computer at the time a scheduled task\r\nspecified for a different user runs, the task runs but is not visible to the current user.\r\nBy default, to schedule a task, you must be a member of the Administrators, Backup Operators, or Server\r\nOperators group on the local computer. By default, when creating a scheduled task, you cannot enter a user who\r\nbelongs to a group that has more rights than the group you belong to. For example, if you are a member of the\r\nBackup Operators group on the local computer, you cannot specify a member of the Administrators group when\r\ncreating a scheduled task. However, a member of the Administrators group can enable a member of any group to\r\ncreate or modify scheduled tasks, by using the cacls command to modify the discretionary access control list\r\n(DACL) of the Tasks folder. By default, the Tasks folder is located in the \\Windows folder on the hard drive of\r\nthe local computer, for example C:\\Windows\\Tasks. For more information about using cacls, see Cacls. For more\r\ninformation about groups, see Default local groups and Default groups.\r\nNote\r\nA user for whom you assign permissions to the Tasks folder using cacls will be able to access scheduled\r\ntasks for all users. Choose which users to give access to the Tasks folder judiciously.\r\nIn Windows Server 2003 family operating systems, passwords have an expiration date. If you are scheduling\r\nrecurring tasks that run indefinitely, you need to be aware of the expiration date on your passwords. If the\r\npassword changes for an account on a domain, then you must update the tasks scheduled to run under that\r\naccount.\r\nWhen a job is created through Task Scheduler, account information for all tasks that use the same run as account\r\nis stored only once. Task Scheduler validates the run as account when a job is created, which prevents incorrect\r\nhttps://technet.microsoft.com/en-us/library/cc785125.aspx\r\nPage 1 of 2\n\nrun as account information from being saved and, as a result, prevents other existing jobs that use the same\r\naccount from being affected. If the password validation fails, a job file is created, but it will not run.\r\nIf the run as account password has expired or the account has been deleted and recreated, the password must be\r\nupdated for jobs to run. Updating the password for one job automatically updates it for all jobs that use the same\r\nrun as account.\r\nWhen you create a scheduled task, the user credentials you specify for that specific task are securely stored on the\r\nlocal computer.\r\nFor security-related tips on using Task Scheduler, see Task Scheduler Best practices.\r\nNotes\r\nTo view the user and group permissions for a scheduled task, right-click the task, click Properties, and\r\nthen click the Security tab.\r\nTo view or change advanced user and group permissions, on the Security tab, click Advanced, click the\r\nuser for whom you want to view or change permissions, and then click View/Edit.\r\nFor information about viewing past scheduled tasks, see View a log of past scheduled tasks.\r\nFor general information about Task Scheduler, see Task Scheduler overview.\r\nSource: https://technet.microsoft.com/en-us/library/cc785125.aspx\r\nhttps://technet.microsoft.com/en-us/library/cc785125.aspx\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://technet.microsoft.com/en-us/library/cc785125.aspx"
	],
	"report_names": [
		"cc785125.aspx"
	],
	"threat_actors": [],
	"ts_created_at": 1775434601,
	"ts_updated_at": 1775826680,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/df0a90ce40dbd7bda4a8eb7bbc0f3e88c0d775af.pdf",
		"text": "https://archive.orkl.eu/df0a90ce40dbd7bda4a8eb7bbc0f3e88c0d775af.txt",
		"img": "https://archive.orkl.eu/df0a90ce40dbd7bda4a8eb7bbc0f3e88c0d775af.jpg"
	}
}