Jump to content

Task Scheduler problem


Bad boy Warrior

Recommended Posts

I have a strange issue here. I set a schedule for an exe to run as another account (not admin) but one which has admin rights. When executing this app manually it gives me the UAC prompt and runs successfully.

When i set this up as a schedule, i enabled run whether user is logged on or not, gave the account details (which it accepted) and run with highest privileges. When this runs on a schedule the app returns an error within a log which was listed under the Application log. The logs for scheduled tasks do not have any errors listed. All informational logs state the schedule ran successfully.

The application log is:

Version=1

EventType=CLR20r3

EventTime=129223860151321666

ReportType=2

Consent=1

ReportIdentifier=c67d079d-845d-11df-9256-005056802d4b

Response.type=4

Sig[0].Name=Problem Signature 01

Sig[0].Value=SomeApplication.exe

Sig[1].Name=Problem Signature 02

Sig[1].Value=1.0.0.0

Sig[2].Name=Problem Signature 03

Sig[2].Value=4b87adeb

Sig[3].Name=Problem Signature 04

Sig[3].Value=System

Sig[4].Name=Problem Signature 05

Sig[4].Value=2.0.0.0

Sig[5].Name=Problem Signature 06

Sig[5].Value=4a275e12

Sig[6].Name=Problem Signature 07

Sig[6].Value=33c6

Sig[7].Name=Problem Signature 08

Sig[7].Value=273

Sig[8].Name=Problem Signature 09

Sig[8].Value=System.FormatException

DynamicSig[1].Name=OS Version

DynamicSig[1].Value=6.1.7600.2.0.0.272.7

DynamicSig[2].Name=Locale ID

DynamicSig[2].Value=2057

UI[2]=C:\Program Files (x86)\Some Company\Application\SomeApplication.exe

LoadedModule[0]=C:\Program Files (x86)\Some Company\Application\SomeApplication.exe

LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll

LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL

LoadedModule[3]=C:\Windows\system32\KERNEL32.dll

LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll

LoadedModule[5]=C:\Windows\system32\ADVAPI32.dll

LoadedModule[6]=C:\Windows\system32\msvcrt.dll

LoadedModule[7]=C:\Windows\SYSTEM32\sechost.dll

LoadedModule[8]=C:\Windows\system32\RPCRT4.dll

LoadedModule[9]=C:\Windows\system32\SHLWAPI.dll

LoadedModule[10]=C:\Windows\system32\GDI32.dll

LoadedModule[11]=C:\Windows\system32\USER32.dll

LoadedModule[12]=C:\Windows\system32\LPK.dll

LoadedModule[13]=C:\Windows\system32\USP10.dll

LoadedModule[14]=C:\Windows\system32\IMM32.DLL

LoadedModule[15]=C:\Windows\system32\MSCTF.dll

LoadedModule[16]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll

LoadedModule[17]=C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_88dce9872fb18caf\MSVCR80.dll

LoadedModule[18]=C:\Windows\system32\shell32.dll

LoadedModule[19]=C:\Windows\system32\ole32.dll

LoadedModule[20]=C:\Windows\system32\profapi.dll

LoadedModule[21]=C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\9a017aa8d51322f18a40f414fa35872d\mscorlib.ni.dll

LoadedModule[22]=C:\Windows\system32\CRYPTBASE.dll

LoadedModule[23]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll

LoadedModule[24]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System\247913fa7ae6fcf04ea33d28d24ab611\System.ni.dll

LoadedModule[25]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data\46a0336046744a9f29986b208b8d38d4\System.Data.ni.dll

LoadedModule[26]=C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

LoadedModule[27]=C:\Windows\system32\WS2_32.dll

LoadedModule[28]=C:\Windows\system32\NSI.dll

LoadedModule[29]=C:\Windows\system32\CRYPT32.dll

LoadedModule[30]=C:\Windows\system32\MSASN1.dll

LoadedModule[31]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\907b2b3dae591e0484acfc0ea63e8caa\System.Configuration.ni.dll

LoadedModule[32]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\1fb1b14199d6aec70df1a0626a3ae5f2\System.Xml.ni.dll

LoadedModule[33]=C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\1ec65ef1b8265780b3a6e7f1855db885\Microsoft.VisualBasic.ni.dll

LoadedModule[34]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\c92eb7f61e9703abbf85f340e4a38c54\System.Transactions.ni.dll

LoadedModule[35]=C:\Windows\assembly\GAC_64\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

LoadedModule[36]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\a3af29f85ea516622318918d501118d2\System.EnterpriseServices.ni.dll

LoadedModule[37]=C:\Windows\system32\CRYPTSP.dll

LoadedModule[38]=C:\Windows\system32\rsaenh.dll

LoadedModule[39]=C:\Windows\system32\RpcRtRemote.dll

LoadedModule[40]=C:\Windows\system32\security.dll

LoadedModule[41]=C:\Windows\system32\SECUR32.DLL

LoadedModule[42]=C:\Windows\system32\SSPICLI.DLL

LoadedModule[43]=C:\Windows\system32\credssp.dll

LoadedModule[44]=C:\Windows\system32\schannel.DLL

LoadedModule[45]=C:\Windows\system32\kerberos.DLL

LoadedModule[46]=C:\Windows\system32\cryptdll.dll

LoadedModule[47]=C:\Windows\system32\msv1_0.DLL

LoadedModule[48]=C:\Windows\system32\ntdsapi.dll

LoadedModule[49]=C:\Windows\system32\netapi32.dll

LoadedModule[50]=C:\Windows\system32\netutils.dll

LoadedModule[51]=C:\Windows\system32\srvcli.dll

LoadedModule[52]=C:\Windows\system32\wkscli.dll

LoadedModule[53]=C:\Windows\system32\LOGONCLI.DLL

LoadedModule[54]=C:\Windows\system32\mswsock.dll

LoadedModule[55]=C:\Windows\System32\wshtcpip.dll

LoadedModule[56]=C:\Windows\System32\wship6.dll

LoadedModule[57]=C:\Windows\system32\DNSAPI.dll

LoadedModule[58]=C:\Windows\system32\rasadhlp.dll

LoadedModule[59]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\diasymreader.dll

LoadedModule[60]=C:\Windows\system32\iphlpapi.dll

LoadedModule[61]=C:\Windows\system32\WINNSI.DLL

LoadedModule[62]=C:\Windows\system32\dhcpcsvc6.DLL

LoadedModule[63]=C:\Windows\system32\dhcpcsvc.DLL

LoadedModule[64]=C:\Windows\system32\VERSION.dll

LoadedModule[65]=C:\Windows\system32\apphelp.dll

FriendlyEventName=Stopped working

ConsentKey=CLR20r3

AppName=SomeApplication

AppPath=C:\Program Files (x86)\Some Company\Application\SomeApplication.exe

ReportDescription=Stopped working

As i stated the app runs as this user when the same app is run manually but problems occurs when scheduled. Not sure if there are any other logs to take a look at? If it helps i also edited User Account Control: Behavior of elevation to prompt for the administrators and set it not to, but same issue.

Thanks

Edited by Bad boy Warrior
Link to comment
Share on other sites


What happens if you try to manually run it from the Tasks screen? I am betting you are getting an access denied when it tries to run. Can you try changing the account that it runs from, to say SYSTEM or something else just for testing?

Link to comment
Share on other sites

What happens if you try to manually run it from the Tasks screen? I am betting you are getting an access denied when it tries to run. Can you try changing the account that it runs from, to say SYSTEM or something else just for testing?

Manually running as another user has the same results. I changed it to System and had the same results again....

Link to comment
Share on other sites

  • 9 months later...

I had this with an .exe I was trying to run using the Windows Server 2008 task scheduler. Task would run fine if I double clicked it but from the task scheduler it would fail with error "...... has stopped working."

If the file is in C:\ or a close sub directory, try moving it onto the desktop and it might run. Its obviously a permissions thing but much easier to just move the file rather than mess about with windows' conveluted permissions system.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...