Scheduled Task creation error

System Overview

• Operating System: Windows Server 2019 (should apply to most others)
• Hardening Configuration: CIS 2019 (L2)

Problem

After the hardening configuration is applied one cannot create new scheduled tasks that run without logged on User and stored credentials. The following error message is shown when the task should be saved:

Cause

Cause of the problem is Setting 2.3.10.4: (L2) Ensure ‚Network access: Do not allow storage of passwords and credentials for network authentication‘ is set to ‚Enabled‘

It prevents the storage of credentials

Solution

Either disable the rule for the system or better use a group managed service account for the scheduled task. Unfortunately, you have to create the scheduled task with PowerShell, and it cannot be edited in the GUI anymore.

Check

After you disable the setting in the hardening configuration, create a scheduled task with saved credentials.

References

https://techcommunity.microsoft.com/t5/ask-the-performance-team/task-scheduler-error-8220-a-specified-logon-session-does-not/ba-p/375056

Schlagwörter: Scheduled Task, CIS, credentials for network authentication