Getting Scheduled Task information via PowerShell

Hi,

I'm working on a Powershell script that is to be tasked with the job of auditing scheduled tasks that are defined on a number of Servers in our environment.

I've managed to get it working pretty well and it even includes the ability to audit multiple actions and multiple targets.  It also will audit targets with different scheduling parameters.

All is working fine but I just can't figure out how to audit a trigger which is defined as 'On a schedule' where the interval is set to 'Monthly'.

When you do this the resultant CIM object has the type 'MSFT_TaskTrigger'.  I've tried using the object reference but none of the child objects seem to actually have any values associated with them.  This is despite me create a sample test which has both Months and Days specified.

Does anyone else know of a way of achieving this?

Right now I use the New-CimSession cmdlet to first get a valid connection to the remote machine.  Then I use Get-ScheduledTask to retrieve the appropriate tasks.

From there I can enumerate the triggers using the $scheduledTask.Triggers collection.  It seems to work for all triggers but i'm struggling to get the extended information about the trigger schedule when the type is MSFT_TaskTrigger.

Grateful for any pointers or advice that people might have.

Thanks in advance,

Pete

 

Parents
No Data
Reply
  • I don't think Microsoft exposes the information you are looking for with that trigger type. And some tasks that use that type can't even be modified with the Task Scheduler. This may be a case where the command line tool is better.

    PS Scripts:\> schtasks /query /tn test /v /fo list

    Folder: \
    HostName:                             WIN81-ENT-01
    TaskName:                             \test
    Next Run Time:                        N/A
    Status:                               Disabled
    Logon Mode:                           Interactive only
    Last Run Time:                        N/A
    Last Result:                          1
    Author:                               WIN81-ENT-01\Jeff
    Task To Run:                          notepad
    Start In:                             N/A
    Comment:                              N/A
    Scheduled Task State:                 Disabled
    Idle Time:                            Disabled
    Power Management:                     Stop On Battery Mode, No Start On Batteries
    Run As User:                          WIN81-ENT-01\Jeff
    Delete Task If Not Rescheduled:       Disabled
    Stop Task If Runs X Hours and X Mins: 72:00:00
    Schedule:                             Scheduling data is not available in this format.
    Schedule Type:                        Monthly
    Start Time:                           10:00:00 AM
    Start Date:                           7/31/2016
    End Date:                             N/A
    Days:                                 32
    Months:                               JAN, JUL, DEC
    Repeat: Every:                        Disabled
    Repeat: Until: Time:                  Disabled
    Repeat: Until: Duration:              Disabled
    Repeat: Stop If Still Running:        Disabled

    And you can use it to export to a CSV file.

    schtasks /query /v /fo csv | out-file c:\work\tasks.csv

    Which you can then re-import into PowerShell.

    $tasks = Import-csv c:\work\tasks.csv

    $tasks | group "Schedule Type" -NoElement | sort count

    Count Name
    ----- ----
        1 Monthly
        1 Weekly
        3 One Time Only
        6 Scheduling data is not...
        6 One Time Only, Hourly
        6 At idle time
       13 At system start up
       19 Undefined
       29 At logon time
       29 When an event occurs
       35 Daily
       53 On demand only
       76 Schedule Type

Children
No Data