We have a user, and no matter what we do, as soon as he logs in Windows creates a scheduled task to restart the server every day. We've deleted this scheduled task, he's deleted it, we've even tried editing it so that instead of restarting the server
it just opens Notepad (harmless), but as soon as he logs out and back in it changes the scheduled task back to restart the server. There are no startup scripts being run or GPO's that any user has that would schedule a task. It's only this user,
and only on a single server. He signs into other servers just fine, and no scheduled tasks are created. The user didn't create this scheduled task, the logs show it originated form the NT Authority user, and then for some reason changed over to
his username about 3 months later. We've had domain admins and users a like delete this scheduled task but it keeps recreating itself. Has anyone ever seen something like this?
↧