Scheduled Task - Can Not Start

I have a Win2k3 server and I have 3 scheduled tasks. All three tasks are
configured to use the same local account that has ordinary user level priv.
Two of the tasks execute an EXE file run fine. The local account has Modify
permissions to the folder where the exe file resides.

The third task, which fails to run (Cannot run job), is configured to run a
..BAT file in the same local directory, from the same local account. If I
make the local account a member of the Admin group, the task will run. When
the local account has regular user level privs, it won't run. Log file says
error 80070005 - Access Denied.

The batch files contains the following commands (paraphrased)
------------------------------
echo logs stuff to a log file > log.txt
rem Change to folder
D:
CD \folder1\subfolder1
COPY file1 folder --makes backup copies of a couple of files
App.exe --runs the same .exe file as the other two tasks
--------------------------------

I really want to be able to run this third task without adding Admin privs
to the local account. Is there a way to configure this task to run from the
local account without adding admin priv?

Does this user has Read + Executable permission on the .BAT file?

--
Jabez Gan [MVP]
Microsoft MVP: Windows Server
http://www.blizhosting.com
MSBLOG: http://www.msblog.org

"Matt Colegrove" <MattColegrove@discussions.microsoft.com> wrote in message
news:98BF1EE1-E0D6-4C81-8914-1B7C81C6D16E@microsoft.com...
>I have a Win2k3 server and I have 3 scheduled tasks. All three tasks are
> configured to use the same local account that has ordinary user level
> priv.
> Two of the tasks execute an EXE file run fine. The local account has
> Modify
> permissions to the folder where the exe file resides.
>
> The third task, which fails to run (Cannot run job), is configured to run
> a
> .BAT file in the same local directory, from the same local account. If I
> make the local account a member of the Admin group, the task will run.
> When
> the local account has regular user level privs, it won't run. Log file
> says
> error 80070005 - Access Denied.
>
> The batch files contains the following commands (paraphrased)
> ------------------------------
> echo logs stuff to a log file > log.txt
> rem Change to folder
> D:
> CD \folder1\subfolder1
> COPY file1 folder --makes backup copies of a couple of files
> App.exe --runs the same .exe file as the other two tasks
> --------------------------------
>
> I really want to be able to run this third task without adding Admin privs
> to the local account. Is there a way to configure this task to run from
> the
> local account without adding admin priv?
>

Yes. The local account has read/execute on the batch file.

It turns out there is a knowledgebase article on this one, though I can't
recall the number. The fix is to go to the CMD.EXE file in \windows\system32
and give the local account read/execute permissions on the CMD.EXE file.
After that, the task scheduler will be able to launch the batch file under
the local account.

"Jabez Gan [MVP]" wrote:

> Does this user has Read + Executable permission on the .BAT file?
>
> --
> Jabez Gan [MVP]
> Microsoft MVP: Windows Server
> http://www.blizhosting.com
> MSBLOG: http://www.msblog.org
>
> "Matt Colegrove" <MattColegrove@discussions.microsoft.com> wrote in message
> news:98BF1EE1-E0D6-4C81-8914-1B7C81C6D16E@microsoft.com...
> >I have a Win2k3 server and I have 3 scheduled tasks. All three tasks are
> > configured to use the same local account that has ordinary user level
> > priv.
> > Two of the tasks execute an EXE file run fine. The local account has
> > Modify
> > permissions to the folder where the exe file resides.
> >
> > The third task, which fails to run (Cannot run job), is configured to run
> > a
> > .BAT file in the same local directory, from the same local account. If I
> > make the local account a member of the Admin group, the task will run.
> > When
> > the local account has regular user level privs, it won't run. Log file
> > says
> > error 80070005 - Access Denied.
> >
> > The batch files contains the following commands (paraphrased)
> > ------------------------------
> > echo logs stuff to a log file > log.txt
> > rem Change to folder
> > D:
> > CD \folder1\subfolder1
> > COPY file1 folder --makes backup copies of a couple of files
> > App.exe --runs the same .exe file as the other two tasks
> > --------------------------------
> >
> > I really want to be able to run this third task without adding Admin privs
> > to the local account. Is there a way to configure this task to run from
> > the
> > local account without adding admin priv?
> >
>
>

Thanks for the update Matt!

--
Jabez Gan [MVP]
Microsoft MVP: Windows Server
http://www.blizhosting.com
MSBLOG: http://www.msblog.org

"Matt Colegrove" <MattColegrove@discussions.microsoft.com> wrote in message
news:F14BF727-E34B-423D-B510-961808ED2283@microsoft.com...
> Yes. The local account has read/execute on the batch file.
>
> It turns out there is a knowledgebase article on this one, though I can't
> recall the number. The fix is to go to the CMD.EXE file in
> \windows\system32
> and give the local account read/execute permissions on the CMD.EXE file.
> After that, the task scheduler will be able to launch the batch file under
> the local account.
>
> "Jabez Gan [MVP]" wrote:
>
>> Does this user has Read + Executable permission on the .BAT file?
>>
>> --
>> Jabez Gan [MVP]
>> Microsoft MVP: Windows Server
>> http://www.blizhosting.com
>> MSBLOG: http://www.msblog.org
>>
>> "Matt Colegrove" <MattColegrove@discussions.microsoft.com> wrote in
>> message
>> news:98BF1EE1-E0D6-4C81-8914-1B7C81C6D16E@microsoft.com...
>> >I have a Win2k3 server and I have 3 scheduled tasks. All three tasks
>> >are
>> > configured to use the same local account that has ordinary user level
>> > priv.
>> > Two of the tasks execute an EXE file run fine. The local account has
>> > Modify
>> > permissions to the folder where the exe file resides.
>> >
>> > The third task, which fails to run (Cannot run job), is configured to
>> > run
>> > a
>> > .BAT file in the same local directory, from the same local account. If
>> > I
>> > make the local account a member of the Admin group, the task will run.
>> > When
>> > the local account has regular user level privs, it won't run. Log file
>> > says
>> > error 80070005 - Access Denied.
>> >
>> > The batch files contains the following commands (paraphrased)
>> > ------------------------------
>> > echo logs stuff to a log file > log.txt
>> > rem Change to folder
>> > D:
>> > CD \folder1\subfolder1
>> > COPY file1 folder --makes backup copies of a couple of files
>> > App.exe --runs the same .exe file as the other two tasks
>> > --------------------------------
>> >
>> > I really want to be able to run this third task without adding Admin
>> > privs
>> > to the local account. Is there a way to configure this task to run
>> > from
>> > the
>> > local account without adding admin priv?
>> >
>>
>>