Create task as non-admin user

[kuechn]

Hi,
we are using simple-acme which in turn uses your library.
https://github.com/simple-acme/simple-acme/

We run simple-acme as normal user, admin rights are neither needed nor wanted.
When trying to add a task it fails:
"Unable to register scheduled task, please run as administrator or equivalent."

The author commented:
"there might be some combination of settings that makes it [your library] work without elevation but I haven't found it so far"

I did a simple crosscheck with the same user on the same system with "schasks", which works fine:

% schtasks /create /tn "ACME test" /tr x:\temp\adc.txt /sc daily
SUCCESS: The scheduled task "ACME test" has successfully been created.

So how to use your lib as is works with "schtasks"?

[shwetankg07]

I think the admin part comes from how simple-acme sets up the task. When you don't give it a user, it registers the task to run as SYSTEM with highest privileges, and creating a SYSTEM task always needs admin.

Your schtasks test makes a different kind of task. Without /ru it runs as you, only while you're logged in, with normal rights. As far as I know the library can do the same if you register the task as the current user with the interactive logon type and leave out highest privileges. I haven't tried that as a non-admin though.

So it probably needs an option on the simple-acme side. One catch is that a task like that only runs while you're logged in, which isn't great for renewals.

[WouterTinus]

That is true - currently - but I've tried modifying the code to set up a task as a limited user with TaskRunLevel.LUA and TaskLogonType.InteractiveToken and I still get slapped with an acccess denied exception. Could it be that I need to modify more settings - i.e it's not allowed to set up such a task with a daily trigger, or number of other flags that I use - but I didn't have time to explore all variables yet so that's why @kuechn decided to ask here.