Vista - Running Programs Through Task Scheduler Shortcuts

Are there any security issues with running a program through a task scheduler shortcut (to run as administrator basically)? I was toying with leaving UAC on and just making some shortcuts for the programs I trust, but am just wondering if doing so would make me more vulnerable somehow.

Thanks.

Also, is there any difference between setting these shortcuts up in task scheduler to run them as an administrator and simply going into the properties for the program --> compatibility tab --> run this program as an administrator?

I think maybe if you set the task to only run when the user is logged on then it would be fine as another user would not be able to access the task without you being logged on and a virus wouldn't know about it. I don't think there is much difference if the tasks runs as you, I'm not 100% sure but I think it will run under the taskeng as a child ... I'm not sure. So maybe if the task engine stopped responding/died the program would die ...

Well the tasks only run when I run them...so I'm not sure what you mean by all that.

I also am not too worried about them dying...there are just small programs up for only a minute or two.

I mean if another user tried to run a program as an administrator via the task.

Could that be done remotely? And does it even make a difference whether or not that program was a task or elsewhere if they have that control?

It depends really, for example if they had a command prompt open remotely they could use the task to elevate it to admin level, maybe just go to the task file and remove everyone from the ACL except you.

So, just to be clear...

Is it safer to run the programs normally than it is to run them through the task scheduler / as an administrator?

Or does it not really matter either way, because if a hacker gets to that point then your shortcuts are the least of your troubles?

I think creating a task to open a program such as a command prompt would be a security risk, you are risking someone finding that hole and using it to gain more access than they already have. However the only way I can think to exploit it is if a human got access to the computer, so if you are the only user on the system then the treat isn't very big however if you have standard users too then the risk is slightly bigger.

Alright then, thank you

What I'm trying to get around is UAC. I've had it turned off for quite a while and never really saw the worth in it, but read an article that alerted me to the fact that it turns off more than the annoying prompts that pop up when I open or move things.

So, in an effort to improve my system's security...it's back on.

On the How To Geek site, I was reading 4 ways to make UAC less annoying: 4 Ways to Make UAC Less Annoying on Windows Vista :: the How-To Geek.


Do you have any suggestions to stop the prompts and at the same time leave some of the security provided by UAC in place?--whether it be recommending one of the 4 pieces of advice given in the How To Geek article, or your own advice.


Thank you. Sorry for the long post.