Hello
I'm trying to manage some tasks in the task scheduler via a web application running in IIS.
In a task you have always to specify which user account will be used to run the task, the default IIS user (IIS APPPOOL\DefaultAppPool) can't be used to run a task, so when you manage tasks from IIS you have always to specify another user to run the task, like the Local Service. Another solution would be to change the identity of the application pool in IIS and instead of using the ApplicationPoolIdentity switch it to Local Service, in this case when you manage tasks from IIS you don't have to specify another account because it is already the Local Service.
Now this is working correctly in windows 7 but not in windows server 2008. In windows 2008 if I set the identity of the application pool to Local Service I can manage the tasks in the task scheduler, but if I use the default identity (ApplicationPoolIdentity) and I try to manage the tasks setting as running user the Local Service I get an access denied:
Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
I though that the users and user groups were configurated in the same way on windows 7 and windows 2008 but it seems not, somehow the ApplicationPoolIdentity on windows 2008 has less permissions than on windows 7. I didn't find anything to configure the ApplicationPoolIdentity permissions the only thing that you can do is set the read/write permissions to the filesystem, so I tried to give read/write permissions to the C:\windows\system32\tasks folder but it didn't work.
So I'm out of ideas, I suppose that the ApplicationPoolIdentity can't access some folder on the filesystem to read/write something but the exception doesn't help because it doesn't say which folder, on the other side there isn't an entry in the windows event to find it out.
How can I solve this problem? How can I find out which permission is missing to the ApplicationPoolIdentity to access the task scheduler?
Thanks