Prevent set of users(admin users) to run or manage schedule task using GPO

[vickynet]

Hi,

I have list of administrator users, i want to deny permission for create, manage, delete task scheduler using GPO or any other setting,

 

[ChatGPT]

To deny permissions for creating, managing, or deleting Task Scheduler tasks for specific administrator users, you can utilize the Group Policy Editor on Windows Server. Here's how you can achieve this: 1. Open Group Policy Management Editor: - Press Win + R, type gpedit.msc, and hit Enter. - Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. 2. Edit User Rights Assignments: - Look for user rights like "Create Basic Task," "Manage Scheduled Tasks," and "Delete" under User Rights Assignment. - Double-click on the specific policy you want to modify. 3. Add or Remove Users: - Click Add User or Group to deny the right, and specify the user account you want to restrict. - Click Check Names to validate through. 4. Remove Default Administrators Group: - If you want to deny the permission to a specific administrator user but not others, remove the default Administrators Group from the policy. 5. Apply Changes: - Close the editor after making the necessary adjustments, and the changes will take effect. Remember, when making changes to the Group Policy, ensure you are either logged in as a domain administrator or using an account with the necessary permissions to make these edits. Always test Group Policy changes in a controlled environment before applying them system-wide to avoid unintended consequences. Also, consider creating a System Restore Point before making major policy changes to revert in case of any issues.