Reset Scheduled Task permissions

[Yordi De Rijcke]

We have an issue with resetting scheduled tasks passwords.

In Passwordstate, we have an AD account with a password reset depency. This dependecy is a scheduled task on a Windows Server 2019 server.

The associated reset account is a privileged AD account.

Due to the changes in Windows Server 2016, it is not possible for us to edit the scheduled task password. This is because a non-admin user cannot edit scheduled tasks which are being ran as another user (the user resetting the password is the privileged AD account, not the account the service runs as).

The AD privileged user has administrator access on the local machine but the command to reset the password (schtasks.exe) must be run as administrator which isn't possible due to UAC.

 

Is there any work around for this issue besides disabling UAC?

 

Kind regards,

Yordi