How to run as a user with limited access, but giving administrator rights in the Task Scheduler?

Question

Active Directory

Computers are connected to an Active Directory domain, it contains ordinary users (limited rights). As a domain administrator, I want to autorun programs that run as administrator through the Task Scheduler. But the problem is that these programs are interactive and must interact with the current user's work environment, while programs run as Administrator are in a null session and do not have access to the current user's work environment. Can you suggest how to solve this issue?

Answer 1

did you even try to do that? where did the difficulty arise?
- administrator password, will be requested when you create a task that runs on his behalf. more specifically, any job "on behalf of" anyone other than "system" and core services
- if you create a job on behalf of "system", even it can be interactive with the user. but you need to create it on behalf of the admin
- but if you try to create a task for the admin / system without having admin rights, problems naturally arise. it's normal and right

Answer 2

runas will not help?

Answer 3

The setting of the task is surprising - why would users need to do anything on their computers with elevated rights? You can, of course, try with adding users to Restricted Users - but, it seems to me, we need to think in the direction of assigning user rights and not needing to run programs as administrator, this is somehow wrong.