IRegisteredTask::SetSecurityDescriptor method (taskschd.h)

Sets the security descriptor that is used as credentials for the registered task.

Syntax

HRESULT SetSecurityDescriptor(
  [in] BSTR sddl,
  [in] LONG flags
);

Parameters

[in] sddl

The security descriptor that is used as credentials for the registered task.

Note   If the Local System account is denied access to a task, then the Task Scheduler service can produce unexpected results.
 

[in] flags

Flags that specify how to set the security descriptor. The TASK_DONT_ADD_PRINCIPAL_ACE flag from the TASK_CREATION enumeration can be specified.

Return value

If this method succeeds, it returns S_OK. Otherwise, it returns an HRESULT error code.

Remarks

You can specify the access control list (ACL) in the security descriptor for a task in order to allow or deny certain users and groups access to a task.

Requirements

Requirement Value
Minimum supported client Windows Vista [desktop apps only]
Minimum supported server Windows Server 2008 [desktop apps only]
Target Platform Windows
Header taskschd.h
Library Taskschd.lib
DLL Taskschd.dll

See also

IRegisteredTask

IRegisteredTask::SetSecurityDescriptor

ITaskFolder::GetSecurityDescriptor