I need to disallow one of the domain users to create new scheduled tasks and browse details of existing tasks on a certain machine (Win2008R2 in Win2008R2 domain). This user is a member of Users group on this machine. Here is what I already tried to do:
- Enabled Prohibit Browse and Prohibit New Task Creation in the Local Group Policy (both for Computer Configuration and for Users Configuration)
- Enabled Prohibit Browse and Prohibit New Task Creation in the Local Computer\Non-Administrators Policy
- Removed permissions for SYSTEM for HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Task Scheduler5.0 and changed Allow Browse and Task Creation keys to 0
- Created domain Group Policy for this user with Prohibit Browse and Prohibit New Task Creation enabled
Each of these operations was followed by
Group Policy Results console shows that the policies are applied to the user.
Despite all of these user is still able to create new tasks and browse tasks details.
Am I missed something?