22 iunie 2012 01:40
We have an XP computer with about 12 Scheduled tasks that are set to run everyday. We applied a strong password policy recently and the user of the XP computer is reporting the tasks are failing since the change. The XP pc that runs the tasks pulls information from a server on our domain. Both pc and server are on the same domain. The tasks can be scheduled to run many times but around the 11th hour they all fail. We have tried the following to no avail:
- Two separte domain accounts, one was created before the strong password policy was applied the other after.
- Ran tasks from two different computers.
- Added both accounts to the Local Administrators group on the XP pc and server.
- Added both accounts to the Logon as a Batch Job on the XP pc and server.
The default domain policy has the Logon as a Batch Job setting as Not Defined. The XP pc resides in an OU that has a Logon as a Batch Job defined but the only account that is added is SYSTEM. The server is in a different OU without any GPOs with the Logon as a Batch job defined.
We have 4 domain controllers, on one of them I set the Logon as a Batch Job with the account that is running the tasks. Replication will occur later today on the other 3. I will find out tomorrow morning if this will work. Any other suggestions will be greatly apprecaited.
- Mutat de K_evin ZhuMicrosoft Contingent Staff, Moderator 25 iunie 2012 04:49 (From:Directory Services)
22 iunie 2012 08:03
as it sounds you have configured the scheduled task with GPOs please ask in http://social.technet.microsoft.com/Forums/en/winserverGP/threads
You have to assure the account used in the scheduled task has set the correct password, did you try to logon once with that account on a normal machine? Did it work?
The server where you connect to has nothing to do with the task itself, if the user account is able to authenticate then logons and running the task shold work.
Assure that the password policy is ONLY set on domain level and NOT on OUs.
Please understand that on domain controllers you should not change the defaults as normally NO domain user is able to logon to DCs and also should NEVER do this.
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
- Marcat ca răspuns de K_evin ZhuMicrosoft Contingent Staff, Moderator 25 iunie 2012 04:52
25 iunie 2012 04:52ModeratorHi,
As this thread has been quiet for a while, we will mark it as ‘Answered’ as the information provided should be helpful. If you need further help, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish.
BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts.
TechNet Community Support