Back

Disable task scheduler unless task scheduler use is absolutely necessary.


CONTROL ID
01829
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Disable all unnecessary services unless otherwise noted in a policy exception., CC ID: 00880

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • The organization must only enable Task Scheduler if absolutely necessary. With Windows XP, the task can run under alternate credentials, and does not necessarily have to run under the local system account. (§ 4.1.19, The Center for Internet Security Windows XP Professional SP1/SP2 Benchmark, 2.01)
  • Table F-3: For Windows 2000 Professional, the organization must configure the permissions for Task Scheduler to Administrators: Full Control; System: Read; and System: Start, Stop, and Pause. Table F-4: For Windows XP Professional, the organization must configure the permissions for Task Scheduler t… (Table F-3, Table F-4, CMS Business Partners Systems Security Manual, Rev. 10)
  • The Task Scheduler service should be disabled. The service should be documented if enabling it is required. (§ 5.2.2.1, DISA Windows Server 2003 Security Checklist, Version 6 Release 1.11)
  • The Task Scheduler service should be Disabled, unless absolutely necessary. If it is Enabled, there should be a documented and justified reason. (§ 5.2.2.1, DISA Windows XP Security Checklist, Version 6 Release 1.11)
  • For Specialized Security - Limited Functionality systems, this service should be Disabled. For all other Windows XP environments, this service is Not Defined. (§ 6.5, Guidance for Securing Microsoft Windows XP Systems for IT Professionals, NIST SP 800-68, Revision 1)
  • This service lets users schedule tasks to be executed automatically at a later time or date. The Task Scheduler service is Not Defined for Enterprise Client environments and should be Disabled for Specialized Security - Limited Functionality environments. (Pg 69, NSA Guide to Security Microsoft Windows XP)