Scheduled tasks run with elevated privileges can't access stored - Microsoft Community

-

it seems after creators update scheduled tasks run elevated privileges ('run highest privileges' option) can't access stored windows credentials. bug or intentional change , there recommended workaround? 

here's 1 way reproduce behaviour:

  1. start credential manger , add windows share credentials.
  2. in console window type 'cmdkey /list', should list added credentials
  3. create task in task manager:
    • trigger: on user logon
    • action: run cmd.exe
    • tick 'run highest privileges' option
  4. reboot machine , log in
  5. in console window (let's call 'console 1') opened scheduled task type 'cmdkey /list'. won't display credentials added in step 1 , listed in step 2. -> this looks bug
  6. now, without closing 'console 1' open console window administrator (let's call 'console 2') , type 'cmdkey /list'. list credentials added in step 1.
  7. switch 'console 1' , type 'cmdkey /list' again. time credentials listed properly, unlike in step 5. looks access windows credentials somehow 'unlocked' step 6.

hi marcin,

your concern best handled our other forum. we suggest post concern in our technet  forums have experts more knowledgeable these kinds of issues.

regards.



Windows / Windows 10 / Network & internet / PC



Comments

Post a Comment

Popular posts from this blog

Error 0x80180018 when trying to add a second work account on Windows - Microsoft Community

-
Image
hello, different users have 2 office365 business accounts 2 different tenants , experiencing technical issues when trying add second work account on windows 10. no matters order start adding accounts (tenanta , tenantb, , same applies vice versa), encounter error 0x80180018 when adding second work account. googling found on azure ad documentation following description: 0x80180018 "iderrormdmlicenseerror", // menroll_e_userlicense there error license. can try again or contact system administrator error code {0}. but can't match problem encountered because first work account added on win10. both licenses have business premium license assigned on 2 different office365 tenants. the information provided not clear about. says error has been encountered, try again, no matters how many times try same error no further information. i highly appreciate if can give further details how achieve adding 2 work ...
Read more

How to sync (or sign-in) to Windows 10 properly? - Microsoft Community

-
hello, so bought new laptop came windows 10 pre-installed. when unpacking, store clerk created dummy local account used when starting first time - make process faster syncing microsoft account, can sync later - said. anyway, done , welcomed desktop. synced microsoft account , went in. synced right away - down wallpapers , themes - save 1 thing; the account name. it still using dummy local account name, despite picture has changed account picture. clicked 'sign in microsoft account instead', , process failed in end. said "[my e-mail account] here already. user in device uses microsoft account, can't add here" i tried removing e-mail & app account under 'e-mail & app account' tab , when tried again, still didn't work. please, want name here. oh, , don't know topic should fall - there's no 'sync' specifically, pick 1 think closest. sorry in advance. ...
Read more

Cannot connect to RDS 2012R2 session through RDWeb Gateway using - Microsoft Community

-
obvious: when connecting 2012r2 rds session collection through rdweb gateway using windows 10 generic connection error thrown. steps reproduce windows 10: connect rdweb public gateway address on https outside of network internet explorer (also tried edge, chrome, firefox) authenticate domain\credential , password successfully select session collection connect to observe generic connection error caveats: external connections through rdweb gateway windows 7x , 8x microsoft rd client on android successful. internal connections through rdweb gateway windows 10 successful. specific events client "microsoft-windows-terminalservices-clientactivexcore" event logs: (identifying information changed) component name:caaclientadapter, :: 'm_sphelper->readcreds failed' in caaclientadapter::createtunnel @ 380 err=[0xffffffff], error code:0xffffffff component name:caahttpclienttunnel, :: 'workspace id obtained, not smell guid (br...
Read more