WindowsAccessControlScheduledTaskAccessRule

Parameters

Parameter	Attribute	DataType	Description	Allowed Values
AccessControlType	Key	System.Security.AccessControl.AccessControlType	Whether the entry is an allow or a deny entry.	Allow, Deny
AccessRights	Key	WindowsScheduledTaskRights	The exact scheduled task rights the entry grants or denies.	ReadTaskDefinition, WriteTaskDefinition, ReadExtendedProperties, WriteExtendedProperties, RunTask, ReadProperties, WriteProperties, Delete, ReadPermissions, ChangePermissions, TakeOwnership, Synchronize, Read, ReadAndRun, Write, Modify, FullControl, GenericAll, GenericExecute, GenericWrite, GenericRead
Account	Key	System.String	The principal the rule applies to. An alias is normalized by security identifier, so any spelling that resolves to the same principal matches.
TaskName	Key	System.String	The name of the registered task the rule applies to.
TaskPath	Key	System.String	The task folder that contains the registered task.
AllowedRootPath	Required	System.String	The task folder subtree the configuration is allowed to write under. A target outside it is refused before anything is written.
Ensure	Write	WindowsAccessControlDscEnsure	Whether the exact entry must be present or absent. Defaults to Present.	Absent, Present
Reasons	Read	WindowsAccessControlDscReason[]	Returns why the resource is not in the desired state. Not configurable.

Description

The composite key identifies exactly one explicit access control entry on a registered scheduled task by folder, task name, account, rights, and qualifier. Every write is confined to AllowedRootPath.