Why sometimes I need admin privileges to add the task using schtasks?

1

Why sometimes I need admin privileges to add the task using schtasks?
For example I can add following task without admin proivileges:

schtasks /Create /SC ONCE /TN testtask /ST 13:15 /F /TR "C:\\tmp\\scheduler\\test.cmd"

But I need admin privileges when I try to schedule a task which will be run by some event.
For example:

schtasks /Create /SC ONEVENT /MO "*[System[Provider[@Name='Microsoft-Windows-Security-Auditing'] and EventID=4801]]" /EC Security /TN testtask /F /TR "C:\\tmp\\scheduler\\test.cmd"

Volodymyr Bezuglyy

Posted 2016-10-10T10:20:06.570

Reputation: 123

I'm pretty sure in this case it's because you need admin access to read the Security event log, but that's mostly a guess. :) – Ƭᴇcʜιᴇ007 – 2016-10-10T14:22:35.180

No answers