Jump to content

Recommended Posts

Posted (edited)

I have a strange issue here. I set a schedule for an exe to run as another account (not admin) but one which has admin rights. When executing this app manually it gives me the UAC prompt and runs successfully.

When i set this up as a schedule, i enabled run whether user is logged on or not, gave the account details (which it accepted) and run with highest privileges. When this runs on a schedule the app returns an error within a log which was listed under the Application log. The logs for scheduled tasks do not have any errors listed. All informational logs state the schedule ran successfully.

The application log is:

Version=1

EventType=CLR20r3

EventTime=129223860151321666

ReportType=2

Consent=1

ReportIdentifier=c67d079d-845d-11df-9256-005056802d4b

Response.type=4

Sig[0].Name=Problem Signature 01

Sig[0].Value=SomeApplication.exe

Sig[1].Name=Problem Signature 02

Sig[1].Value=1.0.0.0

Sig[2].Name=Problem Signature 03

Sig[2].Value=4b87adeb

Sig[3].Name=Problem Signature 04

Sig[3].Value=System

Sig[4].Name=Problem Signature 05

Sig[4].Value=2.0.0.0

Sig[5].Name=Problem Signature 06

Sig[5].Value=4a275e12

Sig[6].Name=Problem Signature 07

Sig[6].Value=33c6

Sig[7].Name=Problem Signature 08

Sig[7].Value=273

Sig[8].Name=Problem Signature 09

Sig[8].Value=System.FormatException

DynamicSig[1].Name=OS Version

DynamicSig[1].Value=6.1.7600.2.0.0.272.7

DynamicSig[2].Name=Locale ID

DynamicSig[2].Value=2057

UI[2]=C:\Program Files (x86)\Some Company\Application\SomeApplication.exe

LoadedModule[0]=C:\Program Files (x86)\Some Company\Application\SomeApplication.exe

LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll

LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL

LoadedModule[3]=C:\Windows\system32\KERNEL32.dll

LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll

LoadedModule[5]=C:\Windows\system32\ADVAPI32.dll

LoadedModule[6]=C:\Windows\system32\msvcrt.dll

LoadedModule[7]=C:\Windows\SYSTEM32\sechost.dll

LoadedModule[8]=C:\Windows\system32\RPCRT4.dll

LoadedModule[9]=C:\Windows\system32\SHLWAPI.dll

LoadedModule[10]=C:\Windows\system32\GDI32.dll

LoadedModule[11]=C:\Windows\system32\USER32.dll

LoadedModule[12]=C:\Windows\system32\LPK.dll

LoadedModule[13]=C:\Windows\system32\USP10.dll

LoadedModule[14]=C:\Windows\system32\IMM32.DLL

LoadedModule[15]=C:\Windows\system32\MSCTF.dll

LoadedModule[16]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll

LoadedModule[17]=C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_88dce9872fb18caf\MSVCR80.dll

LoadedModule[18]=C:\Windows\system32\shell32.dll

LoadedModule[19]=C:\Windows\system32\ole32.dll

LoadedModule[20]=C:\Windows\system32\profapi.dll

LoadedModule[21]=C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\9a017aa8d51322f18a40f414fa35872d\mscorlib.ni.dll

LoadedModule[22]=C:\Windows\system32\CRYPTBASE.dll

LoadedModule[23]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll

LoadedModule[24]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System\247913fa7ae6fcf04ea33d28d24ab611\System.ni.dll

LoadedModule[25]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data\46a0336046744a9f29986b208b8d38d4\System.Data.ni.dll

LoadedModule[26]=C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

LoadedModule[27]=C:\Windows\system32\WS2_32.dll

LoadedModule[28]=C:\Windows\system32\NSI.dll

LoadedModule[29]=C:\Windows\system32\CRYPT32.dll

LoadedModule[30]=C:\Windows\system32\MSASN1.dll

LoadedModule[31]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\907b2b3dae591e0484acfc0ea63e8caa\System.Configuration.ni.dll

LoadedModule[32]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\1fb1b14199d6aec70df1a0626a3ae5f2\System.Xml.ni.dll

LoadedModule[33]=C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\1ec65ef1b8265780b3a6e7f1855db885\Microsoft.VisualBasic.ni.dll

LoadedModule[34]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\c92eb7f61e9703abbf85f340e4a38c54\System.Transactions.ni.dll

LoadedModule[35]=C:\Windows\assembly\GAC_64\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

LoadedModule[36]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\a3af29f85ea516622318918d501118d2\System.EnterpriseServices.ni.dll

LoadedModule[37]=C:\Windows\system32\CRYPTSP.dll

LoadedModule[38]=C:\Windows\system32\rsaenh.dll

LoadedModule[39]=C:\Windows\system32\RpcRtRemote.dll

LoadedModule[40]=C:\Windows\system32\security.dll

LoadedModule[41]=C:\Windows\system32\SECUR32.DLL

LoadedModule[42]=C:\Windows\system32\SSPICLI.DLL

LoadedModule[43]=C:\Windows\system32\credssp.dll

LoadedModule[44]=C:\Windows\system32\schannel.DLL

LoadedModule[45]=C:\Windows\system32\kerberos.DLL

LoadedModule[46]=C:\Windows\system32\cryptdll.dll

LoadedModule[47]=C:\Windows\system32\msv1_0.DLL

LoadedModule[48]=C:\Windows\system32\ntdsapi.dll

LoadedModule[49]=C:\Windows\system32\netapi32.dll

LoadedModule[50]=C:\Windows\system32\netutils.dll

LoadedModule[51]=C:\Windows\system32\srvcli.dll

LoadedModule[52]=C:\Windows\system32\wkscli.dll

LoadedModule[53]=C:\Windows\system32\LOGONCLI.DLL

LoadedModule[54]=C:\Windows\system32\mswsock.dll

LoadedModule[55]=C:\Windows\System32\wshtcpip.dll

LoadedModule[56]=C:\Windows\System32\wship6.dll

LoadedModule[57]=C:\Windows\system32\DNSAPI.dll

LoadedModule[58]=C:\Windows\system32\rasadhlp.dll

LoadedModule[59]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\diasymreader.dll

LoadedModule[60]=C:\Windows\system32\iphlpapi.dll

LoadedModule[61]=C:\Windows\system32\WINNSI.DLL

LoadedModule[62]=C:\Windows\system32\dhcpcsvc6.DLL

LoadedModule[63]=C:\Windows\system32\dhcpcsvc.DLL

LoadedModule[64]=C:\Windows\system32\VERSION.dll

LoadedModule[65]=C:\Windows\system32\apphelp.dll

FriendlyEventName=Stopped working

ConsentKey=CLR20r3

AppName=SomeApplication

AppPath=C:\Program Files (x86)\Some Company\Application\SomeApplication.exe

ReportDescription=Stopped working

As i stated the app runs as this user when the same app is run manually but problems occurs when scheduled. Not sure if there are any other logs to take a look at? If it helps i also edited User Account Control: Behavior of elevation to prompt for the administrators and set it not to, but same issue.

Thanks

Edited by Bad boy Warrior

Posted

What happens if you try to manually run it from the Tasks screen? I am betting you are getting an access denied when it tries to run. Can you try changing the account that it runs from, to say SYSTEM or something else just for testing?

Posted

What happens if you try to manually run it from the Tasks screen? I am betting you are getting an access denied when it tries to run. Can you try changing the account that it runs from, to say SYSTEM or something else just for testing?

Manually running as another user has the same results. I changed it to System and had the same results again....

  • 9 months later...
Posted

I had this with an .exe I was trying to run using the Windows Server 2008 task scheduler. Task would run fine if I double clicked it but from the task scheduler it would fail with error "...... has stopped working."

If the file is in C:\ or a close sub directory, try moving it onto the desktop and it might run. Its obviously a permissions thing but much easier to just move the file rather than mess about with windows' conveluted permissions system.

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...