In the Windows Task Scheduler, the interface allows me to use a specific user to run the task (General > Security options
). Under the Run whether user is logged on or not option, the interface has a checkbox with the text: Do not store password. The task will only have access to local computer resources.
I have been searching for the meaning of "local computer resources", but every site seems to assume the definition. I have an idea about what it means, but my experience with the Task Scheduler leads me to believe that "local computer resources" indicates fewer resources that I thought it did.
Which privileges do I have with the Do not store password option?
Best Answer
My experience indicates that ADS authentication with a remote Domain Server exceeds "local computer resources", so you can't run a task as an ADS username without storing a password. You can of course create a local user on that machine who will be authenticated locally without Task Scheduler storing the password.
However, check out the discussion of "S4U" here: http://technet.microsoft.com/en-us/library/cc722152.aspx
Maybe it's not actually the authentication, but the fact that our ADS users' homedirs are on network servers.