Windows 2003 Permissions ??

[ArmyITGuy]

We have a number of 2003 servers that we monitor. We are handing some of the monitoring off to other than admins.

I'm having difficulty setting up a user with non-admin rights that can view scheudled tasks.

Is it that the tasks were scheduled by an admin? Or is my user profile goofy.

 

[campyracr]

Found this link:

http://support.microsoft.com/?kbid=310208

Deny Users Permissions to View or Change Scheduled Tasks
You can set advanced permissions on files and folders so that users do not have permission to view or change a scheduled task. To do so:
1. Click Start, point to Programs, point to Accessories, point to System Tools, and then click Scheduled Tasks.
2. Right-click the task on which you want to set permissions, click Properties, and then click the Security tab.
3. Click Advanced, click the user or group for whom you want to set permissions, and then click View/Edit.
4. Assign the appropriate permissions.

 

[ArmyITGuy]

That's what I was looking at.

I'm still hoping there is a "global" way to do this with a group permission.

 

[ArmyITGuy]

I should clarify. I want to create a global group that has the ability to login to a server (obviously) and view the scheduled tasks. No changes to the tasks yet...

In this way I don't have to edit every server's task list, just the servers themselves.

 

[drew1701d]

The only way I can think of to accomplish this for your user base is to create a separate OU and place those semi-power users into that group. Then create a group policy and link it to that OU defining permissions for the user configuration of what they can and can't do.

"I'm certifiable, not certified. It just means my answers are from experience...not a book