2
1
Is there any way to allow users to create/edit/delete scheduled tasks on a remote machine without allowing them to log on (remotely)? The machine is a Windows 7 (Enterprise) one or alternatively Windows Server 2008 R2.
Jörg Battermann
Posted 2013-02-12T12:21:18.830
Reputation: 231
1
You can add users who need to modify scheduled tasks remotely to the local Administrators group via GPO (Security Filtering) and configure this GPO with not to allow interactive logon setting or alternatively you can specify on a remote host in Advanced System Settings specific user accounts which can log in.
After this is done, user then can connect to Task Scheduler by opening Task Scheduler locally and then entering name of the remote host.
Volodymyr M.
Posted 2013-02-12T12:21:18.830
Reputation: 1 428
This surely works, but the OPs requirement included "without granting them the right to log on", which precludes making the users members of the Administrators group - you effectively can't revoke administrative rights from administrators. – syneticon-dj – 2013-11-25T10:24:41.253
Are machines in a domain or standalone hosts? – Volodymyr M. – 2013-02-12T12:37:54.520
@Volodymyr these machines are in a domain – Jörg Battermann – 2013-02-12T13:48:24.060