windowswideopen.com

How to Change Permissions on the Windows Scheduled Tasks Folder (C:\Windows\Tasks)

To modify folder permissions on C:\Windows\Tasks — the “Scheduled Tasks” folder you will need to use CACLS.EXE tool that allows manipulation of the NTFS permission flags directly.

1. Open a CMD prompt

2. Type XCOPY C:\WINDOWS\TASKS C:\TASKTEMP /s /e /k /o

This will copy the tasks folder, in its entirety, including permissions and attributes. This essentially gives you a “mirrored” version of the scheduled tasks at C:\TASKTEMP.

3. Go to Windows Explorer and modify the ACL of C:\TASKTEMP as needed. It is important to set the “Apply To” attribute to “This folder only.”

4. Go back to the CMD prompt and type CACLS C:\TASKTEMP /S

Select the SDDL string , within the quotes, and copy into the notepad. Since the command prompt does not support line-wrapping text copy, you may have to post a larger string into notepad, and then trim out the stuff on either side of the quotes. You only want the bare SDDL string in the clipboard.

5. Type CACLS C:\WINDOWS\TASKS /S:<SDDL>

…replacing/pasting the <SDDL> part with the SDDL string you put into step 4 — do not include quotes.

6. Test!

7. Delete the C:\TASKTEMP folder.

Note: the default ACL for Windows Server 2003 is D:P(A;OICIIO;FA;;;CO)(A;;0×1200ab;;;BO)(A;;0×1200ab;;;SO)(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)
Operating System Task SchedulerOperating System Task Scheduler

Filed under: Operating System, Task Scheduler