I posted a question a while ago about allowing a specific user to start/stop Windows services.
I decided to revisit the issue. I have no idea what I did differently this time, but the GPO finally allows my Backup user to start/stop the appropriate services. UNTIL I try to run a scheduled task as that user.
I have a batch file that stops a service, backs up / verifies the service's data, and restarts the service. If I open CMD as the Backup user and run the batch file, it works fine. If I create a scheduled task, set it to run as the Backup user regardless of whether the user is logged on, and have the task run same batch file, it is no longer able to stop / start the service (Error 5, access denied).
I assume this is because the user is not logged in, thus the GPO is not applied to its account. If that is the case how can I get this to work? I would rather like to avoid running the task as an Administrator.