Domain controller: Allow server operators to schedule tasksID: oval:org.secpod.oval:def:29613 | Date: (C)2015-10-14 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
This security setting determines if Server Operators are allowed to submit jobs by means of the AT schedule facility. The impact of this policy setting configuration should be small for most organizations. Users, including those in the Server Operators group, will still be able to create jobs by means of the Task Scheduler Wizard, but those jobs will run in the context of the account with which the user authenticates when they set up the job.
Note: This security setting only affects the AT schedule facility; it does not affect the Task Scheduler facility.
Default: This policy is not defined, which means that the system treats it as disabled
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options!Domain controller: Allow server operators to schedule tasks
(2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa!SubmitControl
Platform: |
Microsoft Windows 8.1 |