Task scheduling : error 0x80070005: Access denied

Check that the user also has logon as batch job rights on \\Cypher

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"François Miermont" wrote:
| And also, if I open an interactive session with my save user, and then go
to
| Scheduled task|File|Execute, the .bat works !
|
| The problem is, I think, a problem of permission to launch a .bat as a
task
| (or service ?).
|
| I also look at the GPO, but my save user have rights "Open a session as a
| service" and "Open a session as a Task".

Check that the user also has logon as batch job rights on \\Cypher

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"François Miermont" wrote:
| And also, if I open an interactive session with my save user, and then go
to
| Scheduled task|File|Execute, the .bat works !
|
| The problem is, I think, a problem of permission to launch a .bat as a
task
| (or service ?).
|
| I also look at the GPO, but my save user have rights "Open a session as a
| service" and "Open a session as a Task".

On Cypher ? It's the remote server.

Well, I also check, and I think it's ok (not sure, because in French the
rule is call "Ouvrir une session en tant que tâche", is it that ?).

Thx a lot for your interest :-)

"Dave Patrick" wrote:

> Check that the user also has logon as batch job rights on \\Cypher
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "François Miermont" wrote:
> | And also, if I open an interactive session with my save user, and then go
> to
> | Scheduled task|File|Execute, the .bat works !
> |
> | The problem is, I think, a problem of permission to launch a .bat as a
> task
> | (or service ?).
> |
> | I also look at the GPO, but my save user have rights "Open a session as a
> | service" and "Open a session as a Task".
>
>
>

On Cypher ? It's the remote server.

Well, I also check, and I think it's ok (not sure, because in French the
rule is call "Ouvrir une session en tant que tâche", is it that ?).

Thx a lot for your interest :-)

"Dave Patrick" wrote:

> Check that the user also has logon as batch job rights on \\Cypher
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "François Miermont" wrote:
> | And also, if I open an interactive session with my save user, and then go
> to
> | Scheduled task|File|Execute, the .bat works !
> |
> | The problem is, I think, a problem of permission to launch a .bat as a
> task
> | (or service ?).
> |
> | I also look at the GPO, but my save user have rights "Open a session as a
> | service" and "Open a session as a Task".
>
>
>

Ok now I'm sure it's a security problem : if I make my save user member of
the local administrators group, the task run ! But I don't want to let him in
this group.

I'm unable to find the correct configuration.

"François Miermont" wrote:

> On Cypher ? It's the remote server.
>
> Well, I also check, and I think it's ok (not sure, because in French the
> rule is call "Ouvrir une session en tant que tâche", is it that ?).
>
> Thx a lot for your interest :-)
>
> "Dave Patrick" wrote:
>
> > Check that the user also has logon as batch job rights on \\Cypher
> >
> > --
> > Regards,
> >
> > Dave Patrick ....Please no email replies - reply in newsgroup.
> > Microsoft Certified Professional
> > Microsoft MVP [Windows]
> > http://www.microsoft.com/protect
> >
> > "François Miermont" wrote:
> > | And also, if I open an interactive session with my save user, and then go
> > to
> > | Scheduled task|File|Execute, the .bat works !
> > |
> > | The problem is, I think, a problem of permission to launch a .bat as a
> > task
> > | (or service ?).
> > |
> > | I also look at the GPO, but my save user have rights "Open a session as a
> > | service" and "Open a session as a Task".
> >
> >
> >

Ok now I'm sure it's a security problem : if I make my save user member of
the local administrators group, the task run ! But I don't want to let him in
this group.

I'm unable to find the correct configuration.

"François Miermont" wrote:

> On Cypher ? It's the remote server.
>
> Well, I also check, and I think it's ok (not sure, because in French the
> rule is call "Ouvrir une session en tant que tâche", is it that ?).
>
> Thx a lot for your interest :-)
>
> "Dave Patrick" wrote:
>
> > Check that the user also has logon as batch job rights on \\Cypher
> >
> > --
> > Regards,
> >
> > Dave Patrick ....Please no email replies - reply in newsgroup.
> > Microsoft Certified Professional
> > Microsoft MVP [Windows]
> > http://www.microsoft.com/protect
> >
> > "François Miermont" wrote:
> > | And also, if I open an interactive session with my save user, and then go
> > to
> > | Scheduled task|File|Execute, the .bat works !
> > |
> > | The problem is, I think, a problem of permission to launch a .bat as a
> > task
> > | (or service ?).
> > |
> > | I also look at the GPO, but my save user have rights "Open a session as a
> > | service" and "Open a session as a Task".
> >
> >
> >

Yes on remote server.

Control Panel|Admin Tools|Local Security Policy\Local Policies\User Rights
Assignments
"Log on as a batch job"

I can't read French but a translator I used gets "To open a session as a
task" I'm not sure it's the same of not really.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"François Miermont" wrote:
| On Cypher ? It's the remote server.
|
| Well, I also check, and I think it's ok (not sure, because in French the
| rule is call "Ouvrir une session en tant que tâche", is it that ?).
|
| Thx a lot for your interest :-)

Yes on remote server.

Control Panel|Admin Tools|Local Security Policy\Local Policies\User Rights
Assignments
"Log on as a batch job"

I can't read French but a translator I used gets "To open a session as a
task" I'm not sure it's the same of not really.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"François Miermont" wrote:
| On Cypher ? It's the remote server.
|
| Well, I also check, and I think it's ok (not sure, because in French the
| rule is call "Ouvrir une session en tant que tâche", is it that ?).
|
| Thx a lot for your interest :-)

That's the correct translation.

I have found where's the problem. I can make a task that launch calc.exe for
exemple. I also can copy calc.exe in my .bat's directory, and then make a
task that launch it.
But I'm unable to make a task that launch a .bat (or .cmd). I really think
there's something like IIS lockdown, no ?

"Dave Patrick" wrote:

> Yes on remote server.
>
> Control Panel|Admin Tools|Local Security Policy\Local Policies\User Rights
> Assignments
> "Log on as a batch job"
>
> I can't read French but a translator I used gets "To open a session as a
> task" I'm not sure it's the same of not really.
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "François Miermont" wrote:
> | On Cypher ? It's the remote server.
> |
> | Well, I also check, and I think it's ok (not sure, because in French the
> | rule is call "Ouvrir une session en tant que tâche", is it that ?).
> |
> | Thx a lot for your interest :-)
>
>
>

That's the correct translation.

I have found where's the problem. I can make a task that launch calc.exe for
exemple. I also can copy calc.exe in my .bat's directory, and then make a
task that launch it.
But I'm unable to make a task that launch a .bat (or .cmd). I really think
there's something like IIS lockdown, no ?

"Dave Patrick" wrote:

> Yes on remote server.
>
> Control Panel|Admin Tools|Local Security Policy\Local Policies\User Rights
> Assignments
> "Log on as a batch job"
>
> I can't read French but a translator I used gets "To open a session as a
> task" I'm not sure it's the same of not really.
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "François Miermont" wrote:
> | On Cypher ? It's the remote server.
> |
> | Well, I also check, and I think it's ok (not sure, because in French the
> | rule is call "Ouvrir une session en tant que tâche", is it that ?).
> |
> | Thx a lot for your interest :-)
>
>
>

I was right !

Here is the solution : http://support.microsoft.com/kb/867466/en-us

It's a really new feature of Windows 2003.

Thx a lot for your help Patrick ;-)

"François Miermont" wrote:

> That's the correct translation.
>
> I have found where's the problem. I can make a task that launch calc.exe for
> exemple. I also can copy calc.exe in my .bat's directory, and then make a
> task that launch it.
> But I'm unable to make a task that launch a .bat (or .cmd). I really think
> there's something like IIS lockdown, no ?
>
> "Dave Patrick" wrote:
>
> > Yes on remote server.
> >
> > Control Panel|Admin Tools|Local Security Policy\Local Policies\User Rights
> > Assignments
> > "Log on as a batch job"
> >
> > I can't read French but a translator I used gets "To open a session as a
> > task" I'm not sure it's the same of not really.
> >
> > --
> > Regards,
> >
> > Dave Patrick ....Please no email replies - reply in newsgroup.
> > Microsoft Certified Professional
> > Microsoft MVP [Windows]
> > http://www.microsoft.com/protect
> >
> > "François Miermont" wrote:
> > | On Cypher ? It's the remote server.
> > |
> > | Well, I also check, and I think it's ok (not sure, because in French the
> > | rule is call "Ouvrir une session en tant que tâche", is it that ?).
> > |
> > | Thx a lot for your interest :-)
> >
> >
> >

I was right !

Here is the solution : http://support.microsoft.com/kb/867466/en-us

It's a really new feature of Windows 2003.

Thx a lot for your help Patrick ;-)

"François Miermont" wrote:

> That's the correct translation.
>
> I have found where's the problem. I can make a task that launch calc.exe for
> exemple. I also can copy calc.exe in my .bat's directory, and then make a
> task that launch it.
> But I'm unable to make a task that launch a .bat (or .cmd). I really think
> there's something like IIS lockdown, no ?
>
> "Dave Patrick" wrote:
>
> > Yes on remote server.
> >
> > Control Panel|Admin Tools|Local Security Policy\Local Policies\User Rights
> > Assignments
> > "Log on as a batch job"
> >
> > I can't read French but a translator I used gets "To open a session as a
> > task" I'm not sure it's the same of not really.
> >
> > --
> > Regards,
> >
> > Dave Patrick ....Please no email replies - reply in newsgroup.
> > Microsoft Certified Professional
> > Microsoft MVP [Windows]
> > http://www.microsoft.com/protect
> >
> > "François Miermont" wrote:
> > | On Cypher ? It's the remote server.
> > |
> > | Well, I also check, and I think it's ok (not sure, because in French the
> > | rule is call "Ouvrir une session en tant que tâche", is it that ?).
> > |
> > | Thx a lot for your interest :-)
> >
> >
> >

Good find! Glad to hear it is resolved.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"François Miermont" wrote:
|I was right !
|
| Here is the solution : http://support.microsoft.com/kb/867466/en-us
|
| It's a really new feature of Windows 2003.
|
| Thx a lot for your help Patrick ;-)

Good find! Glad to hear it is resolved.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"François Miermont" wrote:
|I was right !
|
| Here is the solution : http://support.microsoft.com/kb/867466/en-us
|
| It's a really new feature of Windows 2003.
|
| Thx a lot for your help Patrick ;-)

Just FYI....

You can map a drive as "system" etc by using the Local Computer
Policy "User Configuration - Logon/Logoff". You place a .bat file here
that maps the drive you want active and available during logoff and it
will be there for any process that needs it (scripts)....Of course
permissions need to be set correctly for whatever user(s) need them....

Dave Patrick wrote:
> Yes on remote server.
>
> Control Panel|Admin Tools|Local Security Policy\Local Policies\User
Rights
> Assignments
> "Log on as a batch job"
>
> I can't read French but a translator I used gets "To open a session
as a
> task" I'm not sure it's the same of not really.
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "François Miermont" wrote:
> | On Cypher ? It's the remote server.
> |
> | Well, I also check, and I think it's ok (not sure, because in
French the
> | rule is call "Ouvrir une session en tant que tâche", is it that
?).
> |
> | Thx a lot for your interest :-)