“No mapping between account names and security IDs was done” when importing Scheduled Tasks In Windows 2008

scheduled-taskwindows-server-2008

OK, I have a Windows 2008 Server scheduled task that runs on system startup. This works fine. But I want to move this task to another box (actually, I'm using Amazon and need this to work on other instances launched from this image but that's complexity not relevant to the problem).

So I export the task to XML, and try to import it using schtasks. But when I try to reimport it on the same box (just by changing the name), I get

C:\>schtasks /Create /XML "mytask.xml" /TN "My Task 2"

ERROR: No mapping between account names and security IDs was done.
(17,8):LogonType:

I look, and I notice that in the Principals section it says

 <UserId>IP-0AD68720\Administrator</UserId>

Which will make me sad when I try to move this task to another box. But if I edit that to just say "Administrator", when I import I get this error:

ERROR: Logon failure: unknown user name or bad password.

So I can't even reimport it on the same box, and can clearly see I'll have trouble importing it on another… Any hints? I want to alter the task so I can use it on other boxes to accomplish the same goal.

Thanks…

Best Answer

ok in order to make this transportable, where the scheduler asks for a username and pw just enter system for the username and no password.

Related Solutions

Windows Scheduled Tasks – Fixing ‘Access Denied’ Error

OK Guys, this issue plagued me for some time. I finally found a solution and would like to share.

Warning! The following solution involves the Windows System Registry. Editing or manipulating the registry incorrectly can result in serious system damage which may require reinstallation of the operating system. If you are not comfortable editing the registry, then take your system to a professional. If you choose to proceed, then it is essential that you create a complete system backup and a Windows System Restore Point before proceeding.

First download subinacl from Microsofts web site and run the installation package. http://www.microsoft.com/downloads/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en

SubInACL is a command-line tool that enables administrators to obtain security information about files, registry keys, and services, and transfer this information from user to user, from local or global group to group, and from domain to domain.

Next copy and paste the following command to a text file. Save the file as reset.cmd. Once saved double click the file and the commands will begin to run. This process takes anywhere from 3 to 10 minutes of time. After it has run, there will be no restart required in most cases(Oracle I found to be a different story). Proceed with scheduling task or whatever you were doing before getting the dreaded "Access Denied" Error. Hope this helps!

cd /d "%ProgramFiles%\Windows Resource Kits\Tools"
subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f
subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f
subinacl /subdirectories %windir%\*.* /grant=administrators=f /grant=system=f
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

Windows Server 2008 scheduled tasks cannot create files

Check C:\Windows\Temp. For me, when the scheduled task runs when not logged in, it was using this location as TEMP instead of C:\Users\USER\AppData\Local\Temp.

For me, this problem only struck while using Windows Server (2012) - didn't occur when using a client version of Windows (e.g., Windows 7).

Note, that when logged in and running the task manually - it would use the users temp location - which was what was throwing me.

Related Topic