Hello Folks,
My first questions here as it's the first time they have not been answered yet (at least I think so).
We are running Windows 2008 as File Servers and a group of associates is currently set as "Power Users" on these machines. This grants them everything they need to do now, however, they will need to do File Transfers between these servers in the near future, NTFS and Share permissions are OK. As the transfers will sometime have a large amount of data and low bandwidth, we thought about creating batch files with robocopy and schedule tasks to run these batches. (Not sure if this is the best way but at least seems so)
On Windows 2003 we could simply change the permissions on C:\Windows\Tasks and Power Users would be able to create tasks. Now this solution does not work and I wonder if there's something in the local policy or through a global GPO that may change this scenario in the File Servers.
Just a few considerations:
- Granting them full admin privilege is out of question;
- Task Scheduler was preferred as it saves their credentials and keep the transfer going even after they disconnect from the servers. Simply starting a robocopy would fail as they would be logged off from RDP after the idle period. The AT command is also an option but I think it's pretty much the same thing.
- Maybe there's another way to execute these file transfers between the servers that would not stop after an idle period or something like that, but right now I'm having a hard time to allow power users to schedule tasks or even create a group in AD and somehow allow this group to schedule tasks. The idea of the AD group came as Power Users would grant the same access to more people and the group in question has just a few analysts.
Any help is highly appreciated.
Thank you!