Jump to content

Any way to reveal "Super Hidden" Task Scheduler tasks?


NoelC

Recommended Posts

Now that Task Scheduler entries are encrypted, I'd like to see the specifics for certain entries, yet some are "super-hidden" - i.e., they don't show even though they're there.

 

Do you know of any tweak to make the Task Scheduler show these super-hidden entries?  I'm sure the Microsoft people must be able to see them to set them up.

 

-Noel

Link to comment
Share on other sites


That may not be actually true - it was just a guess, because what I see doesn't really look editable.

 

Look for example in the Task Scheduler Library > Microsoft > Windows > Task Scheduler entry.  In my Win 10 10586 test system, it's empty.

 

Now look in registry key HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Schedule \ TaskCache \ Tree \ Microsoft \ Windows \ TaskScheduler.

 

There are sub-key entries there, e.g., Idle Maintenance, with a big SD value that is REG_BINARY and contains nothing readable.

 

-Noel

Edited by NoelC
Link to comment
Share on other sites

That may not be actually true - it was just a guess, because what I see doesn't really look editable.

 

Look for example in the Task Scheduler Library > Microsoft > Windows > Task Scheduler entry.  In my Win 10 10586 test system, it's empty.

 

Now look in registry key HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Schedule \ TaskCache \ Tree \ Microsoft \ Windows \ TaskScheduler.

 

There are sub-key entries there, e.g., Idle Maintenance, with a big SD value that is REG_BINARY and contains nothing readable.

 

-Noel

 

    The SD value is the security descriptor that specifies the permissions for that task folder.  Actual tasks will appear as subkeys containing the values Id, Index and SD.  The Id value should map to a key having that ID with all the task details in HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks.

    For some reason, there appears to be four tasks in my Task Scheduler key, all of which do not map to any task:

  • Idle Maintenance {6D71909C-2476-40AD-A52D-B19859878FD6}
  • Maintenance Configurator {3CCF9C21-B0ED-40DF-87F1-762E35D9222B}
  • Manual Maintenance {8064E985-43F1-4F36-A0EE-A4CD8ABD7CD6}
  • Regular Maintenance {0F96EA56-C1F2-4ABD-9051-9BB8ED5227CB}

    Honestly, I'm not sure what's up with those.  Normally, this is an indication of corrupted (orphaned) tasks that should be deleted.  In addition to the registry, there's three additional Tasks folders on the HDD:

  • C:\Windows\Tasks
  • C:\Windows\system32\Tasks
  • C:\Windows\syswow64\Tasks

    Still nothing turns up regarding those four "phantom" tasks.  I would recommend using a 3rd-party file browser to view the contents of those folders as administrator without having to change the permissions (which could cause damage).

Edited by Techie007
Link to comment
Share on other sites

It appears that those 4 tasks are owned by the SYSTEM account. Only SYSTEM has Full Control of them in the registry. Running Task Scheduler as Administrator doesn't seem to be enough for them to show up. Maybe if you run schtasks.exe as System you could see them?

Take a look at the answer on here for Windows 8:

http://superuser.com/questions/497983/windows-8-waking-issues-maintenance-configurator-task-cannot-be-changed-or-d

The elevation trick doesn't work for me.

Link to comment
Share on other sites

Thanks for the additional insights.

 

Microsoft Windows [Version 10.0.10586]

 

C:\TEMP>dir c:\windows\tasks

 Volume in drive C has no label.
 Volume Serial Number is 20A1-EC28

 

 Directory of c:\windows\tasks

 

11/13/2015  08:50 PM    <DIR>          .
11/13/2015  08:50 PM    <DIR>          ..
07/29/2015  11:41 AM               918 GoogleUpdateTaskMachineCore.job
07/29/2015  11:41 AM               922 GoogleUpdateTaskMachineUA.job
               2 File(s)          1,840 bytes
               2 Dir(s)  33,522,401,280 bytes free

 

C:\TEMP>dir c:\windows\system32\tasks

 Volume in drive C has no label.
 Volume Serial Number is 20A1-EC28

 

 Directory of c:\windows\system32\tasks

 

11/13/2015  08:51 PM    <DIR>          .
11/13/2015  08:51 PM    <DIR>          ..
11/13/2015  08:50 PM             3,014 Adobe Acrobat Update Task
11/13/2015  08:50 PM             2,816 AdobeAAMUpdater-1.0-W10PVM-NoelC
11/15/2015  03:16 PM             2,482 Aero Glass
11/13/2015  08:50 PM             3,270 GoogleUpdateTaskMachineCore
11/13/2015  08:50 PM             3,494 GoogleUpdateTaskMachineUA
10/30/2015  02:24 AM    <DIR>          Microsoft
07/17/2015  05:19 AM    <DIR>          OfficeSoftwareProtectionPlatform
11/13/2015  08:50 PM             2,354 SpeechRuntimeTask
11/17/2015  09:24 AM             2,750 WizMouse
               7 File(s)         20,180 bytes
               4 Dir(s)  33,522,335,744 bytes free

 

C:\TEMP>dir c:\windows\syswow64\tasks

 Volume in drive C has no label.
 Volume Serial Number is 20A1-EC28

 

 Directory of c:\windows\syswow64\tasks

 

10/30/2015  02:24 AM    <DIR>          .
10/30/2015  02:24 AM    <DIR>          ..
10/30/2015  02:24 AM    <DIR>          Microsoft
               0 File(s)              0 bytes
               3 Dir(s)  33,522,335,744 bytes free

 

-Noel

Link to comment
Share on other sites

Try this from powershell to see if your results are different.

 

Get-ChildItem "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\taskcache\tasks" -Recurse | ForEach-Object { Get-ItemProperty $_.pspath |select path,pspath}

Link to comment
Share on other sites

Thanks for the PowerShell mini-education in traversing the registry structure.

 

If it's at all interesting to anyone, here's what a slightly modified version returned, just selecting path, then sorted

 

\Adobe Acrobat Update Task
\AdobeAAMUpdater-1.0-W10PVM-NoelC
\Aero Glass
\GoogleUpdateTaskMachineCore
\GoogleUpdateTaskMachineUA
\OfficeSoftwareProtectionPlatform\SvcRestartTask
\SpeechRuntimeTask
\WizMouse

\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
\Microsoft\Windows\AppID\EDP Policy Manager
\Microsoft\Windows\AppID\PolicyConverter
\Microsoft\Windows\AppID\SmartScreenSpecific
\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck
\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser
\Microsoft\Windows\Application Experience\ProgramDataUpdater
\Microsoft\Windows\Application Experience\StartupAppTask
\Microsoft\Windows\ApplicationData\CleanupTemporaryState
\Microsoft\Windows\ApplicationData\DsSvcCleanup
\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup
\Microsoft\Windows\Autochk\Proxy
\Microsoft\Windows\Bluetooth\UninstallDeviceTask
\Microsoft\Windows\CertificateServicesClient\AikCertEnrollTask
\Microsoft\Windows\CertificateServicesClient\CryptoPolicyTask
\Microsoft\Windows\CertificateServicesClient\KeyPreGenTask
\Microsoft\Windows\CertificateServicesClient\SystemTask
\Microsoft\Windows\CertificateServicesClient\UserTask
\Microsoft\Windows\CertificateServicesClient\UserTask-Roam
\Microsoft\Windows\Chkdsk\ProactiveScan
\Microsoft\Windows\Clip\License Validation
\Microsoft\Windows\CloudExperienceHost\CreateObjectTask
\Microsoft\Windows\Customer Experience Improvement Program\Consolidator
\Microsoft\Windows\Customer Experience Improvement Program\HypervisorFlightingTask
\Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask
\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
\Microsoft\Windows\Defrag\ScheduledDefrag
\Microsoft\Windows\Device Setup\Metadata Refresh
\Microsoft\Windows\DeviceDirectoryClient\IntegrityCheck
\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceAccountChange
\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceConnectedToNetwork
\Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic1
\Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic24
\Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic6
\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceScreenOnOff
\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceSettingChange
\Microsoft\Windows\DeviceDirectoryClient\RegisterUserDevice
\Microsoft\Windows\Diagnosis\Scheduled
\Microsoft\Windows\DiskCleanup\SilentCleanup
\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector
\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver
\Microsoft\Windows\DiskFootprint\Diagnostics
\Microsoft\Windows\DiskFootprint\StorageSense
\Microsoft\Windows\DUSM\dusmtask
\Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate
\Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate
\Microsoft\Windows\Feedback\Siuf\DmClient
\Microsoft\Windows\File Classification Infrastructure\Property Definition Sync
\Microsoft\Windows\FileHistory\File History (maintenance mode)
\Microsoft\Windows\LanguageComponentsInstaller\Installation
\Microsoft\Windows\LanguageComponentsInstaller\Uninstallation
\Microsoft\Windows\License Manager\TempSignedLicenseExchange
\Microsoft\Windows\Location\Notifications
\Microsoft\Windows\Location\WindowsActionDialog
\Microsoft\Windows\Maintenance\WinSAT
\Microsoft\Windows\Management\Provisioning\Logon
\Microsoft\Windows\Maps\MapsToastTask
\Microsoft\Windows\Maps\MapsUpdateTask
\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser
\Microsoft\Windows\MUI\LPRemove
\Microsoft\Windows\Multimedia\SystemSoundsService
\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
\Microsoft\Windows\NetTrace\GatherNetworkInfo
\Microsoft\Windows\NlaSvc\WiFiTask
\Microsoft\Windows\Offline Files\Background Synchronization
\Microsoft\Windows\Offline Files\Logon Synchronization
\Microsoft\Windows\PI\Secure-Boot-Update
\Microsoft\Windows\PI\Sqm-Tasks
\Microsoft\Windows\Plug and Play\Device Install Group Policy
\Microsoft\Windows\Plug and Play\Device Install Reboot Required
\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers
\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
\Microsoft\Windows\Ras\MobilityManager
\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
\Microsoft\Windows\Registry\RegIdleBackup
\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask
\Microsoft\Windows\RemovalTools\MRT_HB
\Microsoft\Windows\RetailDemo\CleanupOfflineContent
\Microsoft\Windows\Servicing\StartComponentCleanup
\Microsoft\Windows\SettingSync\BackgroundUploadTask
\Microsoft\Windows\SettingSync\NetworkStateChangeTask
\Microsoft\Windows\Setup\SetupCleanupTask
\Microsoft\Windows\Shell\CreateObjectTask
\Microsoft\Windows\Shell\FamilySafetyMonitor
\Microsoft\Windows\Shell\FamilySafetyRefresh
\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
\Microsoft\Windows\SpacePort\SpaceAgentTask
\Microsoft\Windows\SpacePort\SpaceManagerTask
\Microsoft\Windows\Storage Tiers Management\Storage Tiers Management Initialization
\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization
\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
\Microsoft\Windows\Sysmain\ResPriStaticDbSync
\Microsoft\Windows\Sysmain\WsSwapAssessmentTask
\Microsoft\Windows\SystemRestore\SR
\Microsoft\Windows\Task Manager\Interactive
\Microsoft\Windows\TextServicesFramework\MsCtfMonitor
\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
\Microsoft\Windows\Time Synchronization\SynchronizeTime
\Microsoft\Windows\Time Zone\SynchronizeTimeZone
\Microsoft\Windows\TPM\Tpm-HASCertRetr
\Microsoft\Windows\TPM\Tpm-Maintenance
\Microsoft\Windows\UpdateOrchestrator\Maintenance Install
\Microsoft\Windows\UpdateOrchestrator\Policy Install
\Microsoft\Windows\UpdateOrchestrator\Reboot
\Microsoft\Windows\UpdateOrchestrator\Resume On Boot
\Microsoft\Windows\UpdateOrchestrator\Schedule Scan
\Microsoft\Windows\UpdateOrchestrator\USO_RebootDisplay
\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display
\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot
\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_WnfDisplay
\Microsoft\Windows\UpdateOrchestrator\USO_WnfDisplay
\Microsoft\Windows\UPnP\UPnPHostConfig
\Microsoft\Windows\User Profile Service\HiveUploadTask
\Microsoft\Windows\WCM\WiFiTask
\Microsoft\Windows\WDI\ResolutionHost
\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance
\Microsoft\Windows\Windows Defender\Windows Defender Cleanup
\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan
\Microsoft\Windows\Windows Defender\Windows Defender Verification
\Microsoft\Windows\Windows Error Reporting\QueueReporting
\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange
\Microsoft\Windows\Windows Media Sharing\UpdateLibrary
\Microsoft\Windows\WindowsColorSystem\Calibration Loader
\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
\Microsoft\Windows\WindowsUpdate\AUSessionConnect
\Microsoft\Windows\WindowsUpdate\Automatic App Update
\Microsoft\Windows\WindowsUpdate\Scheduled Start
\Microsoft\Windows\WindowsUpdate\sih
\Microsoft\Windows\WindowsUpdate\sihboot
\Microsoft\Windows\Wininet\CacheTask
\Microsoft\Windows\WOF\WIM-Hash-Management
\Microsoft\Windows\WOF\WIM-Hash-Validation
\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
\Microsoft\Windows\Workplace Join\Automatic-Device-Join
\Microsoft\Windows\WS\Badge Update
\Microsoft\Windows\WS\License Validation
\Microsoft\Windows\WS\WSRefreshBannedAppsListTask
\Microsoft\Windows\WS\WSTask

 

-Noel

Link to comment
Share on other sites

It would be nice to see these within the Task Scheduler and from there it would be possible to see which ones are enabled.  From there it should be possible to determine the specific actions taken by each of these.  Definitely some interesting stuff as I'd looked into trying to find out about these before there just seems to be very little to no information on these from what I could find on the Internet.  Just not sure how or where to go from here except individual testing.  I'll have my new laptop here soon with Windows 10 and will be tearing into these to minimize as much that I can what M$ wants to do with my operating system.

 

Great posts.  Let me know if you find out anything else about these and I'll follow up after I get my laptop and W10 install.

Link to comment
Share on other sites

SCHTASKS /query

 


Folder: \
TaskName Next Run Time Status
======================================== ====================== ===============
Adobe Acrobat Update Task N/A Disabled
AdobeAAMUpdater-1.0-W10PVM-NoelC N/A Disabled
Aero Glass N/A Running
GoogleUpdateTaskMachineCore N/A Disabled
GoogleUpdateTaskMachineUA N/A Disabled
SpeechRuntimeTask N/A Disabled
WizMouse N/A Ready

Folder: \Microsoft
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \Microsoft\Windows
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \Microsoft\Windows\.NET Framework
TaskName Next Run Time Status
======================================== ====================== ===============
.NET Framework NGEN v4.0.30319 N/A Ready
.NET Framework NGEN v4.0.30319 64 N/A Ready
.NET Framework NGEN v4.0.30319 64 Critic N/A Disabled
.NET Framework NGEN v4.0.30319 Critical N/A Disabled

Folder: \Microsoft\Windows\Active Directory Rights Management Services Client
TaskName Next Run Time Status
======================================== ====================== ===============
AD RMS Rights Policy Template Management N/A Disabled
AD RMS Rights Policy Template Management N/A Ready

Folder: \Microsoft\Windows\AppID
TaskName Next Run Time Status
======================================== ====================== ===============
EDP Policy Manager N/A Ready
PolicyConverter N/A Disabled
SmartScreenSpecific N/A Disabled
VerifiedPublisherCertStoreCheck N/A Disabled

Folder: \Microsoft\Windows\Application Experience
TaskName Next Run Time Status
======================================== ====================== ===============
Microsoft Compatibility Appraiser N/A Disabled
ProgramDataUpdater N/A Disabled
StartupAppTask N/A Disabled

Folder: \Microsoft\Windows\ApplicationData
TaskName Next Run Time Status
======================================== ====================== ===============
CleanupTemporaryState N/A Disabled
DsSvcCleanup N/A Disabled

Folder: \Microsoft\Windows\AppxDeploymentClient
TaskName Next Run Time Status
======================================== ====================== ===============
Pre-staged app cleanup N/A Disabled

Folder: \Microsoft\Windows\Autochk
TaskName Next Run Time Status
======================================== ====================== ===============
Proxy N/A Disabled

Folder: \Microsoft\Windows\Bluetooth
TaskName Next Run Time Status
======================================== ====================== ===============
UninstallDeviceTask N/A Ready

Folder: \Microsoft\Windows\CertificateServicesClient
TaskName Next Run Time Status
======================================== ====================== ===============
AikCertEnrollTask N/A Ready
CryptoPolicyTask N/A Ready
KeyPreGenTask N/A Ready
SystemTask N/A Ready
UserTask N/A Ready
UserTask-Roam N/A Ready

Folder: \Microsoft\Windows\Chkdsk
TaskName Next Run Time Status
======================================== ====================== ===============
ProactiveScan N/A Ready

Folder: \Microsoft\Windows\Clip
TaskName Next Run Time Status
======================================== ====================== ===============
License Validation N/A Disabled

Folder: \Microsoft\Windows\CloudExperienceHost
TaskName Next Run Time Status
======================================== ====================== ===============
CreateObjectTask N/A Disabled

Folder: \Microsoft\Windows\Customer Experience Improvement Program
TaskName Next Run Time Status
======================================== ====================== ===============
Consolidator N/A Disabled
HypervisorFlightingTask N/A Disabled
KernelCeipTask N/A Disabled
UsbCeip N/A Disabled

Folder: \Microsoft\Windows\Data Integrity Scan
TaskName Next Run Time Status
======================================== ====================== ===============
Data Integrity Scan 11/29/2015 12:37:04 AM Ready
Data Integrity Scan for Crash Recovery N/A Ready

Folder: \Microsoft\Windows\Defrag
TaskName Next Run Time Status
======================================== ====================== ===============
ScheduledDefrag N/A Ready

Folder: \Microsoft\Windows\Device Setup
TaskName Next Run Time Status
======================================== ====================== ===============
Metadata Refresh N/A Ready

Folder: \Microsoft\Windows\DeviceDirectoryClient
TaskName Next Run Time Status
======================================== ====================== ===============
IntegrityCheck 11/26/2015 12:00:00 PM Ready
RegisterDeviceAccountChange N/A Ready
RegisterDeviceConnectedToNetwork N/A Disabled
RegisterDevicePeriodic1 N/A Disabled
RegisterDevicePeriodic24 N/A Disabled
RegisterDevicePeriodic6 N/A Disabled
RegisterDeviceScreenOnOff N/A Disabled
RegisterDeviceSettingChange N/A Ready
RegisterUserDevice N/A Ready

Folder: \Microsoft\Windows\Diagnosis
TaskName Next Run Time Status
======================================== ====================== ===============
Scheduled N/A Ready

Folder: \Microsoft\Windows\DiskCleanup
TaskName Next Run Time Status
======================================== ====================== ===============
SilentCleanup N/A Disabled

Folder: \Microsoft\Windows\DiskDiagnostic
TaskName Next Run Time Status
======================================== ====================== ===============
Microsoft-Windows-DiskDiagnosticDataColl N/A Disabled
Microsoft-Windows-DiskDiagnosticResolver N/A Disabled

Folder: \Microsoft\Windows\DiskFootprint
TaskName Next Run Time Status
======================================== ====================== ===============
Diagnostics N/A Ready
StorageSense N/A Ready

Folder: \Microsoft\Windows\DUSM
TaskName Next Run Time Status
======================================== ====================== ===============
dusmtask N/A Disabled

Folder: \Microsoft\Windows\ErrorDetails
TaskName Next Run Time Status
======================================== ====================== ===============
EnableErrorDetailsUpdate N/A Disabled
ErrorDetailsUpdate N/A Disabled

Folder: \Microsoft\Windows\Feedback
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \Microsoft\Windows\Feedback\Siuf
TaskName Next Run Time Status
======================================== ====================== ===============
DmClient N/A Disabled

Folder: \Microsoft\Windows\File Classification Infrastructure
TaskName Next Run Time Status
======================================== ====================== ===============
Property Definition Sync N/A Disabled

Folder: \Microsoft\Windows\FileHistory
TaskName Next Run Time Status
======================================== ====================== ===============
File History (maintenance mode) N/A Disabled

Folder: \Microsoft\Windows\LanguageComponentsInstaller
TaskName Next Run Time Status
======================================== ====================== ===============
Installation N/A Ready
Uninstallation N/A Disabled

Folder: \Microsoft\Windows\License Manager
TaskName Next Run Time Status
======================================== ====================== ===============
TempSignedLicenseExchange N/A Disabled

Folder: \Microsoft\Windows\Live
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \Microsoft\Windows\Location
TaskName Next Run Time Status
======================================== ====================== ===============
Notifications N/A Disabled
WindowsActionDialog N/A Disabled

Folder: \Microsoft\Windows\Maintenance
TaskName Next Run Time Status
======================================== ====================== ===============
WinSAT N/A Ready

Folder: \Microsoft\Windows\Management
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \Microsoft\Windows\Management\Provisioning
TaskName Next Run Time Status
======================================== ====================== ===============
Logon N/A Disabled

Folder: \Microsoft\Windows\Maps
TaskName Next Run Time Status
======================================== ====================== ===============
MapsToastTask N/A Disabled
MapsUpdateTask N/A Disabled

Folder: \Microsoft\Windows\MemoryDiagnostic
TaskName Next Run Time Status
======================================== ====================== ===============
ProcessMemoryDiagnosticEvents N/A Ready
RunFullMemoryDiagnostic N/A Ready

Folder: \Microsoft\Windows\Mobile Broadband Accounts
TaskName Next Run Time Status
======================================== ====================== ===============
MNO Metadata Parser N/A Disabled

Folder: \Microsoft\Windows\MUI
TaskName Next Run Time Status
======================================== ====================== ===============
LPRemove N/A Ready

Folder: \Microsoft\Windows\Multimedia
TaskName Next Run Time Status
======================================== ====================== ===============
SystemSoundsService N/A Running

Folder: \Microsoft\Windows\NetCfg
TaskName Next Run Time Status
======================================== ====================== ===============
BindingWorkItemQueueHandler N/A Ready

Folder: \Microsoft\Windows\NetTrace
TaskName Next Run Time Status
======================================== ====================== ===============
GatherNetworkInfo N/A Disabled

Folder: \Microsoft\Windows\NlaSvc
TaskName Next Run Time Status
======================================== ====================== ===============
WiFiTask N/A Disabled

Folder: \Microsoft\Windows\Offline Files
TaskName Next Run Time Status
======================================== ====================== ===============
Background Synchronization N/A Disabled
Logon Synchronization N/A Disabled

Folder: \Microsoft\Windows\PI
TaskName Next Run Time Status
======================================== ====================== ===============
Secure-Boot-Update N/A Disabled
Sqm-Tasks N/A Disabled

Folder: \Microsoft\Windows\PLA
TaskName Next Run Time Status
======================================== ====================== ===============
INFO: There are no scheduled tasks presently available at your access level.

Folder: \Microsoft\Windows\Plug and Play
TaskName Next Run Time Status
======================================== ====================== ===============
Device Install Group Policy N/A Ready
Device Install Reboot Required N/A Ready
Plug and Play Cleanup N/A Ready
Sysprep Generalize Drivers N/A Ready

Folder: \Microsoft\Windows\Power Efficiency Diagnostics
TaskName Next Run Time Status
======================================== ====================== ===============
AnalyzeSystem N/A Disabled

Folder: \Microsoft\Windows\Ras
TaskName Next Run Time Status
======================================== ====================== ===============
MobilityManager N/A Disabled

Folder: \Microsoft\Windows\RecoveryEnvironment
TaskName Next Run Time Status
======================================== ====================== ===============
VerifyWinRE N/A Ready

Folder: \Microsoft\Windows\Registry
TaskName Next Run Time Status
======================================== ====================== ===============
RegIdleBackup N/A Ready

Folder: \Microsoft\Windows\RemoteAssistance
TaskName Next Run Time Status
======================================== ====================== ===============
RemoteAssistanceTask N/A Disabled

Folder: \Microsoft\Windows\RemovalTools
TaskName Next Run Time Status
======================================== ====================== ===============
MRT_HB N/A Disabled

Folder: \Microsoft\Windows\RetailDemo
TaskName Next Run Time Status
======================================== ====================== ===============
CleanupOfflineContent N/A Disabled

Folder: \Microsoft\Windows\Servicing
TaskName Next Run Time Status
======================================== ====================== ===============
StartComponentCleanup N/A Ready

Folder: \Microsoft\Windows\Setup
TaskName Next Run Time Status
======================================== ====================== ===============
SetupCleanupTask N/A Disabled

Folder: \Microsoft\Windows\Shell
TaskName Next Run Time Status
======================================== ====================== ===============
CreateObjectTask N/A Disabled
FamilySafetyMonitor N/A Disabled
FamilySafetyRefresh N/A Disabled
IndexerAutomaticMaintenance N/A Disabled

Folder: \Microsoft\Windows\SoftwareProtectionPlatform
TaskName Next Run Time Status
======================================== ====================== ===============
SvcRestartTask 11/1/2115 2:07:08 PM Ready
SvcRestartTaskLogon N/A Disabled
SvcRestartTaskNetwork N/A Disabled

Folder: \Microsoft\Windows\SpacePort
TaskName Next Run Time Status
======================================== ====================== ===============
SpaceAgentTask N/A Ready
SpaceManagerTask N/A Ready

Folder: \Microsoft\Windows\Storage Tiers Management
TaskName Next Run Time Status
======================================== ====================== ===============
Storage Tiers Management Initialization N/A Ready
Storage Tiers Optimization N/A Disabled

Folder: \Microsoft\Windows\Sysmain
TaskName Next Run Time Status
======================================== ====================== ===============
HybridDriveCachePrepopulate N/A Disabled
HybridDriveCacheRebalance N/A Disabled
ResPriStaticDbSync N/A Ready
WsSwapAssessmentTask N/A Ready

Folder: \Microsoft\Windows\SystemRestore
TaskName Next Run Time Status
======================================== ====================== ===============
SR N/A Ready

Folder: \Microsoft\Windows\Task Manager
TaskName Next Run Time Status
======================================== ====================== ===============
Interactive N/A Ready

Folder: \Microsoft\Windows\TextServicesFramework
TaskName Next Run Time Status
======================================== ====================== ===============
MsCtfMonitor N/A Running

Folder: \Microsoft\Windows\Time Synchronization
TaskName Next Run Time Status
======================================== ====================== ===============
ForceSynchronizeTime N/A Ready
SynchronizeTime N/A Ready

Folder: \Microsoft\Windows\Time Zone
TaskName Next Run Time Status
======================================== ====================== ===============
SynchronizeTimeZone N/A Ready

Folder: \Microsoft\Windows\TPM
TaskName Next Run Time Status
======================================== ====================== ===============
Tpm-HASCertRetr N/A Disabled
Tpm-Maintenance N/A Disabled

Folder: \Microsoft\Windows\UpdateOrchestrator
TaskName Next Run Time Status
======================================== ====================== ===============
Maintenance Install N/A Disabled
Policy Install N/A Disabled
Reboot N/A Ready
Resume On Boot N/A Disabled
Schedule Scan N/A Disabled
USO_RebootDisplay N/A Disabled
USO_UxBroker_Display N/A Disabled
USO_UxBroker_ReadyToReboot N/A Disabled
USO_UxBroker_WnfDisplay N/A Disabled
USO_WnfDisplay N/A Disabled

Folder: \Microsoft\Windows\UPnP
TaskName Next Run Time Status
======================================== ====================== ===============
UPnPHostConfig N/A Disabled

Folder: \Microsoft\Windows\User Profile Service
TaskName Next Run Time Status
======================================== ====================== ===============
HiveUploadTask N/A Disabled

Folder: \Microsoft\Windows\WCM
TaskName Next Run Time Status
======================================== ====================== ===============
WiFiTask N/A Disabled

Folder: \Microsoft\Windows\WDI
TaskName Next Run Time Status
======================================== ====================== ===============
ResolutionHost N/A Ready

Folder: \Microsoft\Windows\Windows Defender
TaskName Next Run Time Status
======================================== ====================== ===============
Windows Defender Cache Maintenance N/A Ready
Windows Defender Cleanup N/A Ready
Windows Defender Scheduled Scan N/A Ready
Windows Defender Verification N/A Ready

Folder: \Microsoft\Windows\Windows Error Reporting
TaskName Next Run Time Status
======================================== ====================== ===============
QueueReporting N/A Disabled

Folder: \Microsoft\Windows\Windows Filtering Platform
TaskName Next Run Time Status
======================================== ====================== ===============
BfeOnServiceStartTypeChange N/A Ready

Folder: \Microsoft\Windows\Windows Media Sharing
TaskName Next Run Time Status
======================================== ====================== ===============
UpdateLibrary N/A Disabled

Folder: \Microsoft\Windows\WindowsColorSystem
TaskName Next Run Time Status
======================================== ====================== ===============
Calibration Loader N/A Disabled

Folder: \Microsoft\Windows\WindowsUpdate
TaskName Next Run Time Status
======================================== ====================== ===============
AUFirmwareInstall N/A Disabled
AUScheduledInstall N/A Disabled
AUSessionConnect N/A Disabled
Automatic App Update N/A Disabled
Scheduled Start N/A Ready
sih N/A Disabled
sihboot N/A Disabled

Folder: \Microsoft\Windows\Wininet
TaskName Next Run Time Status
======================================== ====================== ===============
CacheTask N/A Running

Folder: \Microsoft\Windows\WOF
TaskName Next Run Time Status
======================================== ====================== ===============
WIM-Hash-Management N/A Ready
WIM-Hash-Validation N/A Ready

Folder: \Microsoft\Windows\Work Folders
TaskName Next Run Time Status
======================================== ====================== ===============
Work Folders Logon Synchronization N/A Disabled
Work Folders Maintenance Work N/A Disabled

Folder: \Microsoft\Windows\Workplace Join
TaskName Next Run Time Status
======================================== ====================== ===============
Automatic-Device-Join N/A Disabled

Folder: \Microsoft\Windows\WS
TaskName Next Run Time Status
======================================== ====================== ===============
Badge Update N/A Disabled
License Validation N/A Disabled
WSRefreshBannedAppsListTask N/A Disabled
WSTask N/A Disabled

Folder: \OfficeSoftwareProtectionPlatform
TaskName Next Run Time Status
======================================== ====================== ===============
SvcRestartTask N/A Disabled

 

 

Note that I have manually disabled quite a few.

 

-Noel

Link to comment
Share on other sites

I have a script below that disables a bunch of these.  Any recommendations or words of advice in shutting any of these off?

 

 

schtasks /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\Application Experience\AitAgent" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Uploader" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\Autochk\Proxy" /Disable | Out-Null
        schtasks /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClient" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /Disable | Out-Null
        
        # Windows Defender
schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Disable | Out-Null
 
# Office
schtasks /Change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Office\Office 15 Subscription Heartbeat" /Disable | Out-Null
schtasks /change /TN "Microsoft\Office\OfficeTelemetry\AgentFallBack2016" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Office\OfficeTelemetry\OfficeTelemetryAgentLogOn2016" /Disable | Out-Null
        
# Others 
schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyUpload" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /Disable  | Out-Null
schtasks /Change /TN "\Microsoft\Windows\Shell\CreateObjectTask" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\WindowsUpdate\sih" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\WindowsUpdate\sihboot" /Disable | Out-Null
        
# Media Center
schtasks /Change /TN "\Microsoft\Windows\Media Center\ActivateWindowsSearch" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\ConfigureInternetTimeService" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\DispatchRecoveryTasks" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\ehDRMInit" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\InstallPlayReady" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\mcupdate" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\MediaCenterRecoveryTask" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\OCURActivate" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\OCURDiscovery" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\PBDADiscovery" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\Media Center\PBDADiscoveryW1" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\Media Center\PBDADiscoveryW2" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\Media Center\PvrRecoveryTask" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\Media Center\PvrScheduleTask" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\Media Center\RegisterSearch" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\Media Center\ReindexSearchRoot" /Disable | Out-Null 
   schtasks /Change /TN "\Microsoft\Windows\Media Center\SqlLiteRecoveryTask" /Disable | Out-Null 
schtasks /Change /TN "\Microsoft\Windows\Media Center\UpdateRecordPath" /Disable | Out-Null
 
<# More and More
        schtasks /Change /TN "\Microsoft\Windows\FileHistory\File History (maintenance mode)" /Disable | Out-Null | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime" /Disable | Out-Null | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Time Synchronization\SynchronizeTime" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\UpdateOrchestrator\Schedule Scan" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\WOF\WIM-Hash-Management" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\WOF\WIM-Hash-Validation" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\CertificateServicesClient\UserTask-Roam" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\File Classification Infrastructure\Property Definition Sync" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Maps\MapsToastTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\SettingSync\BackgroundUploadTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\SettingSync\NetworkStateChangeTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Sysmain\ResPriStaticDbSync" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Sysmain\WsSwapAssessmentTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\WDI\ResolutionHost" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Maps\MapsUpdateTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\AppID\EDP Policy Manager" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Diagnosis\Scheduled" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\DiskFootprint\Diagnostics" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Location\Notifications" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Location\WindowsActionDialog" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\RemovalTools\MRT_HB" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\SkyDrive\Routine Maintenance Task" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\WCM\WiFiTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\WS\Badge Update" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\WS\Sync Licenses" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\WS\WSRefreshBannedAppsListTask" /Disable | Out-Null
schtasks /Change /TN "\Microsoft\Windows\WS\WSTask" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\TPM\Tpm-HASCertRetr" /Disable | Out-Null
        schtasks /Change /TN "\Microsoft\Windows\TPM\Tpm-Maintenance" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Defrag\ScheduledDefrag" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\DiskCleanup\SilentCleanup" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Multimedia\SystemSoundsService" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Offline Files\Background Synchronization" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Offline Files\Logon Synchronization" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Ras\MobilityManager" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\RetailDemo\CleanupOfflineContent" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\TextServicesFramework\MsCtfMonitor" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\User Profile Service\HiveUploadTask" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Wininet\CacheTask" /Disable | Out-Null
schtasks /Change /TN "Microsoft\Windows\Workplace Join\Automatic-Device-Join" /Disable | Out-Null
 
 
# ? schtasks /Change /TN "Microsoft\Windows\SystemRestore\SR" /Enable ?
 
 
Thanks
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...