Report to see who a windows scheduled task is running as?

Follow
Evertt Butler

Is there a way to make a report that shows windows scheduled tasks, and who (what user) they're set to run as?  I've found how to do it with services, but not scheduled tasks.

1

Comments

9 comments

Date Votes
  • Shane Corellian

    Not at this time. We do have plans on adding additional data (such as author, user, etc.) of scheduled tasks.

    2
    Comment actions Permalink
  • Torben Hauge

    Ohh... yes: I too would love an "User Account" field in the database/selectable for reportings etc. It would be very handy - say when changing pw on "service-accounts" 😉

    And it has been for 4 years, since your request - so maybe...??? 😉

    2
    Comment actions Permalink
  • sofiangr .

    I would like this option me too, it will help people know where to look after a password change on domain/administrator account, if you have run as administrator on a scheduled task.

    We can help our self now from PDQ to track "run as domain/administrator" services and thank you for that.

    1
    Comment actions Permalink
  • Norbert Schulze

    Has anyone meanwhile found a solution for this?

    1
    Comment actions Permalink
  • Colin Peach

    Hi Sorry for bumping an old thread but has anyone managed to do this?

    I need to retire an admin account and thought this would be a perfect job for inventory :(

    1
    Comment actions Permalink
  • Brian Isenstein

    Let's bump this again?  I need to see where a specific account is in use, either where running a service or a scheduled task.  Services was straight forward as I can create a collection based on the Service Account.  Scheduled Tasks doesn't have any data points for the run as service.

    0
    Comment actions Permalink
  • Andrew Shassere

    Still not a field grabbed natively with the Windows Task Schedules Scanner, but ran across the following article that gives some examples of how to accomplish this with PowerShell, and have used this successfully in a PowerShell Scanner. The below example would only be looking for scheduled tasks running under the specified account.
    https://community.spiceworks.com/topic/256331-get-user-info-that-scheduled-task-runs-as
    Using the PowerShell Scanner

    $schtask = schtasks.exe /query /s localhost /V /FO CSV | ConvertFrom-Csv
    $schtask | Where { $_."Run As User" -eq "user.name" } | Select "TaskName","Task To Run","Run As User"
    1
    Comment actions Permalink
  • Brian Isenstein

    Andrew, this is great.  Thank you very much for sharing.

    0
    Comment actions Permalink
  • Colin Peach

    Andrew Shassere  Thanks, Worked Great!

    0
    Comment actions Permalink

Please sign in to leave a comment.

Didn't find what you were looking for?

New post