blocking task scheduler with registry or GPO


  1. Posts : 20
    windows 10
       #1

    blocking task scheduler with registry or GPO


    hello.

    i have a very important task that i added to the task scheduler.

    i want to protect the task from delete it or disable it - but i don't found the right way to do it.

    so, i ask if somebody know way and how to do it, and if no, how i can to block the TS whole with the registry or gpo?

    i searched i lot of time in google but without results.

    many thanks in advance!
      My Computer


  2. Posts : 11,634
    Windows 10 Home x64 Version 21H2 Build 19044.1776
       #2

    Only Admin users can alter your tasks.

    You can test this for yourself.
    Create a task,
    create a new local Standard user account for use in the test,
    log in to the new account,
    Open Task scheduler.

    Repeat the test with a new local Admin user account.

    Delete the new user accounts when you have finished or put decent passwords on them.

    Denis
      My Computer


  3. Posts : 20
    windows 10
    Thread Starter
       #3

    hi,

    i'm admin. so how i can protect the task from delete or disable? or you know way to protect the task with pasword?

    many thanks.
      My Computer


  4. Posts : 11,634
    Windows 10 Home x64 Version 21H2 Build 19044.1776
       #4

    If you want to alter your own tasks then there is nothing to stop you.

    Denis
      My Computer


  5. Posts : 20
    windows 10
    Thread Starter
       #5

    you don't know way to protect the task with password?

    - - - Updated - - -

    i found that here in registry i can found the list of the tasks:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks

    so, maybe you know way that here i will can protect specific task from delete it?

    thanks.
      My Computer


  6. Posts : 11,634
    Windows 10 Home x64 Version 21H2 Build 19044.1776
       #6

    If you want to alter your own tasks then there is nothing to stop you.

    Denis
      My Computer


  7. Posts : 1,244
    Windows 10 Pro x64 21H2 (Build: 19044.1415)
       #7

    poop1711 said:
    i'm admin. so how i can protect the task from delete or disable?. or you know way to protect the task with pasword?
    It's simple, don't be Admin, make another account that is not Admin and use that for everyday life, and everything (not just tasks) will be protected, asking you for Admin password each time you (or some program or virus) want to modify anything.

    That way you kill all flies with one shot.
      My Computer


  8. Posts : 20
    windows 10
    Thread Starter
       #8

    hi,

    maybe you know or can recommended for alternative task scheduler?
      My Computer


  9. Posts : 11,634
    Windows 10 Home x64 Version 21H2 Build 19044.1776
       #9

    I have been reluctant to post again because I really do not understand what the requirement actually is. Surely you are able to stop yourself deleting or disabling the task as well as any software solution could ever do.

    However, one thing you could do is examine the Registry entry for your task automatically so that you can notify yourself if the task is disabled or deleted.
    - Deleting the task could be detected by a script that attempted to extract the task hash entry in the Registry. The hash value would not be there to extract if the task was deleted.
    - Disabling the task could be detected by a script that attempted to extract the task hash entry in the Registry. The hash value changes when the task is disabled.
    - Set the examination to run at every boot, for example, and you'll have a decent notification system.

    One solution would be to use Reg Query commands and another would be to use PowerShell.

    Denis
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 21:37.
Find Us




Windows 10 Forums