locked
How do I check for missing permissions for a Schedule tasks? RRS feed

  • Question

  • Moved from W2K3 R2 and W2K8 R2.

    Schedule tasks run as domain admin stop working…

    Followed http://social.technet.microsoft.com/Forums/en/winservermanager/thread/d47d116e-10b9-44f0-9a30-7406c86c2fbe

     

    Namely:

    3) Make sure that the task is running as an account that has explicit "Full access" permissions to all these things: The .bat file itself, the folder containing the .bat file, and the target files/folders that are affected by the .bat script. Inherited permissions didn't seem to work for me.

     

    Questions:

    1. Domain admin has “Full access” as a member of local Administrators group already.

    Why it has to have explicit permission to all required objects?

    Why folder security inheritance doesn’t work properly?

     

    2. At the same time, security inheritance works just fine for “Log on as batch job” (in “Local Security Policy | User Right assignment”). I.e I don't need to grant explisit permission to domain admin to run a batch job.

     

    3. How do I check for missing permissions for a Schedule tasks? If I check Effective permission - domain admin has full access.

     

    Friday, October 16, 2009 5:44 PM