Running Programs Through Task Scheduler Shortcuts

[Odd]

Are there any security issues with running a program through a task scheduler shortcut (to run as administrator basically)? I was toying with leaving UAC on and just making some shortcuts for the programs I trust, but am just wondering if doing so would make me more vulnerable somehow.

Thanks.

 

[Odd]

Also, is there any difference between setting these shortcuts up in task scheduler to run them as an administrator and simply going into the properties for the program --> compatibility tab --> run this program as an administrator?

 

[PainlessTorture]

I think maybe if you set the task to only run when the user is logged on then it would be fine as another user would not be able to access the task without you being logged on and a virus wouldn't know about it. I don't think there is much difference if the tasks runs as you, I'm not 100% sure but I think it will run under the taskeng as a child ... I'm not sure. So maybe if the task engine stopped responding/died the program would die ...

 

[Odd]

Well the tasks only run when I run them...so I'm not sure what you mean by all that.

I also am not too worried about them dying...there are just small programs up for only a minute or two.

 

[PainlessTorture]

Well the tasks only run when I run them...so I'm not sure what you mean by all that.

I also am not too worried about them dying...there are just small programs up for only a minute or two.

I mean if another user tried to run a program as an administrator via the task.

 

[Odd]

Could that be done remotely? And does it even make a difference whether or not that program was a task or elsewhere if they have that control?

 

[PainlessTorture]

It depends really, for example if they had a command prompt open remotely they could use the task to elevate it to admin level, maybe just go to the task file and remove everyone from the ACL except you.

 

[Odd]

So, just to be clear...

Is it safer to run the programs normally than it is to run them through the task scheduler / as an administrator?

Or does it not really matter either way, because if a hacker gets to that point then your shortcuts are the least of your troubles?

 

[PainlessTorture]

I think creating a task to open a program such as a command prompt would be a security risk, you are risking someone finding that hole and using it to gain more access than they already have. However the only way I can think to exploit it is if a human got access to the computer, so if you are the only user on the system then the treat isn't very big however if you have standard users too then the risk is slightly bigger.

 

[Odd]

Alright then, thank you

What I'm trying to get around is UAC. I've had it turned off for quite a while and never really saw the worth in it, but read an article that alerted me to the fact that it turns off more than the annoying prompts that pop up when I open or move things.

So, in an effort to improve my system's security...it's back on.

On the How To Geek site, I was reading 4 ways to make UAC less annoying: 4 Ways to Make UAC Less Annoying on Windows Vista :: the How-To Geek.


Do you have any suggestions to stop the prompts and at the same time leave some of the security provided by UAC in place?--whether it be recommending one of the 4 pieces of advice given in the How To Geek article, or your own advice.


Thank you. Sorry for the long post.

 

[PainlessTorture]

Alright then, thank you

What I'm trying to get around is UAC. I've had it turned off for quite a while and never really saw the worth in it, but read an article that alerted me to the fact that it turns off more than the annoying prompts that pop up when I open or move things.

So, in an effort to improve my system's security...it's back on.

On the How To Geek site, I was reading 4 ways to make UAC less annoying: 4 Ways to Make UAC Less Annoying on Windows Vista :: the How-To Geek.


Do you have any suggestions to stop the prompts and at the same time leave some of the security provided by UAC in place?--whether it be recommending one of the 4 pieces of advice given in the How To Geek article, or your own advice.


Thank you. Sorry for the long post.

I don't have any advice to give, I don't think the prompts are that bad. I don't do alot of stuff that requires elevation so I very rarely see the prompts ...

If you are doing alot of admin stuff at the same time you could always log into the built in admin account or else kill and reopen the explorer as yourself from an elevated command prompt ...

 

[Odd]

Thanks. I don't necessarily do a lot of admin stuff, but the prompts pop up for simple things like opening CCleaner, Malwarebytes', Revo Uninstaller etc...things that I use a lot.

 

[Frostmourne]

The prompts appear because those apps affect the system. Leave UAC on otherwise your security is about the same as XP, you lose protected mode in IE and services have more integrity. As for the shortcuts, choose the options in task scheduler, you can choose wheter to run as administrator, and other options. Try them out.