KB841873 update breaks Task Scheduler

[httpd.confused]

I've found that the KB841873 update eliminates my ability to use Task
Scheduler. Before applying the update, everything worked fine. After
installing the update, I get this error whenever trying to change the AT
account and password, and when entering a password for a scheduled task:

An error has occurred while attempting to set task account information.
The specific error is:
0x80070005: Access is denied.
You do not have permission to perform the requested operation.

Also, this entry appears in the Event Viewer:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 534
Date: X/XX/XXXX
Time: X:XX XX
User: NT AUTHORITY\SYSTEM
Computer: XXXX
Description:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: XXXX
Domain: XXXX
Logon Type: 3
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: XXXX

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Again, this problem happens without anything else changing. I'm logged
in as a member of the Administrator group, I have "Log on as a batch
job" rights--everything. (In the event shows above, the user depicted
as having the problem is "XXXX", not "NT AUTHORITY\SYSTEM". Besides,
SYSTEM has the appropriate rights, too.)

After uninstalling the KB841873 update (and reapplying my password to
the scheduled tasks), everything is fine again. I even restored an
image from over two weeks ago (created with TeraByte Unlimited Image for
Windows), verified that the problem didn't exist, then installed
KB841873 cleanly, and verified that the problem appeared.

And I'm not about to use up one of my free support incidents to report
an apparent bug to Microsoft. So how does one report a problem like
this?

 

[Mgtcons]

I've found that the KB841873 update eliminates my ability to use Task
Scheduler. Before applying the update, everything worked fine. After
installing the update, I get this error whenever trying to change the AT
account and password, and when entering a password for a scheduled task:

An error has occurred while attempting to set task account information.
The specific error is:
0x80070005: Access is denied.
You do not have permission to perform the requested operation.

Also, this entry appears in the Event Viewer:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 534
Date: X/XX/XXXX
Time: X:XX XX
User: NT AUTHORITY\SYSTEM
Computer: XXXX
Description:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: XXXX
Domain: XXXX
Logon Type: 3
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: XXXX

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Again, this problem happens without anything else changing. I'm logged
in as a member of the Administrator group, I have "Log on as a batch
job" rights--everything. (In the event shows above, the user depicted
as having the problem is "XXXX", not "NT AUTHORITY\SYSTEM". Besides,
SYSTEM has the appropriate rights, too.)

After uninstalling the KB841873 update (and reapplying my password to
the scheduled tasks), everything is fine again. I even restored an
image from over two weeks ago (created with TeraByte Unlimited Image for
Windows), verified that the problem didn't exist, then installed
KB841873 cleanly, and verified that the problem appeared.

And I'm not about to use up one of my free support incidents to report
an apparent bug to Microsoft. So how does one report a problem like
this?

I have more or less the same problem in my Dutch version of Windows XP.
Has anybody been able to solve this problem?

 

[Kelly]

httpd.confused - sad company you keep.

Repost.

 

[Justin]

I too am looking for a solution to this problem.

Thanks,
Justin

 

[httpd.confused]

Huh? What does that mean, exactly?

httpd.confused - sad company you keep.

Repost.

 

[MowGreen [MVP]]

Justin,

See if this is of assistance :

You receive a "Cannot delete this scheduled job" error message when
you try to delete a scheduled task in Windows 2000
http://support.microsoft.com/?id=871245

Contact MS , explain the issue and that you're using XP . If you do
NOT ask any other questions regarding unrelated issues all you have
to pay is the charges for the phone call.

MowGreen [MVP]
===============
*-343-* FDNY
Never Forgotten
===============

 

[httpd.confused]

That KB article unfortunately relates to a whole different problem, on a
whole different version of Windows.

 

[httpd.confused]

I've found that the KB841873 update eliminates my ability to use Task
Scheduler. Before applying the update, everything worked fine. After
installing the update, I get this error whenever trying to change the
AT account and password, and when entering a password for a scheduled
task:

An error has occurred while attempting to set task account
information. The specific error is:
0x80070005: Access is denied.
You do not have permission to perform the requested operation.

Also, this entry appears in the Event Viewer:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 534
Date: X/XX/XXXX
Time: X:XX XX
User: NT AUTHORITY\SYSTEM
Computer: XXXX
Description:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: XXXX
Domain: XXXX
Logon Type: 3
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: XXXX

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Again, this problem happens without anything else changing. I'm
logged in as a member of the Administrator group, I have "Log on as a
batch job" rights--everything. (In the event shows above, the user
depicted as having the problem is "XXXX", not "NT AUTHORITY\SYSTEM".
Besides, SYSTEM has the appropriate rights, too.)

After uninstalling the KB841873 update (and reapplying my password to
the scheduled tasks), everything is fine again. I even restored an
image from over two weeks ago (created with TeraByte Unlimited Image
for Windows), verified that the problem didn't exist, then installed
KB841873 cleanly, and verified that the problem appeared.

And I'm not about to use up one of my free support incidents to report
an apparent bug to Microsoft. So how does one report a problem like
this?

I have found a solution. I removed the 841873 update as a temporary
workaround (and in the meantime used Ad Muncher to block potential .JOB
files on the Internet, which was at the heart of the problem addressed
by the update). The problem recurred after installing SP2 (which was
not surprising, of course).

The solution:

1) Go into the Local Security Settings applet (secpol.msc).

2) For any user whose credentials you want used for Task Scheduler:

* Add the user, or any group the user belongs to, to the list
under the "Access this computer from the network" setting; and

* Remove the user, and any groups the user belongs to, from
the "Deny access to this computer from the network" setting.

3) Reboot.

4) Go into Task Scheduler, and for any applicable scheduled tasks, reset
their passwords, or select the (new) "Run only if logged on" check box.

This problem only occurred for users careful and knowledgeable enough to
actually configure these security settings. Who knew that your own
computer wasn't just "this computer", but was also on "the network"?
And yes, that's right, you have to relax some of your security settings
now (or keep them relaxed), just to run scheduled tasks. Nice work,
Microsoft.

And by the way, Kelly, this problem was NOT posted elsewhere.