script to disable 'Run task as soon as possible after scheduled start is missed' for given Scheduled TaskName

Download JSON Download Python

Ratings

Release Time

09/22/2023

Downloads

330 times

Update Time

01/18/2025

Views

387 times

Share-it:

Tags

Task Scheduler

RUN AS LOCALSYSTEM USER

!!! NOTE: give the scheduled TaskName in the "TaskName" variable in the script for which you want to disable the 'Run task as soon as possible after scheduled start is missed'

This script disables the 'Run task as soon as possible after scheduled start is missed' option for the given Scheduled TaskName

Note:
This script could be used as an auto-remediation procedure for the below custom monitoring script.

https://scripts.xcitium.com/frontend/web/topic/script-to-alert-if-run-task-as-soon-as-possible-after-scheduled-start-is-missed-is-enabled-for-given-scheduled-taskname

this script has been scanned with virustotal.com and xcitium verdict cloud.

PYTHON SCRIPT FILE SHA1 VALUE - 62ba4095565cbc9e7fae01da3a79433ac86c960c

JSON FILE SHA1 VALUE - 879b6ff33cfd903108d39077ea31b32790ed3beb

Procedure's Instructions

TaskName = r"COMODO Scan {2BC1F438-A318-4CCC-A065-86425D4B75E5}" #give here the scheduled TaskName

import os
from subprocess import PIPE, Popen
import ctypes

class disable_file_system_redirection:
    _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
    _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
    def __enter__(self):
        self.old_value = ctypes.c_long()
        self.success = self._disable(ctypes.byref(self.old_value))
    def __exit__(self, type, value, traceback):
        if self.success:
            self._revert(self.old_value)

class ExecutionPolicy:
    def __enter__(self):
        with disable_file_system_redirection():
            #getting current executionpolicy
            self.old_policy = os.popen('powershell "Get-ExecutionPolicy"').read().strip()
            #setting execution policy to RemoteSigned
            os.popen('powershell "Set-ExecutionPolicy RemoteSigned"').read()
    def __exit__(self, type, value, traceback):
        with disable_file_system_redirection():
            #setting execution policy back to previous policy
            os.popen('powershell "Set-ExecutionPolicy %s"'%(self.old_policy)).read()

def ecmd(command):   
    from subprocess import Popen, PIPE
    import ctypes
    
    with disable_file_system_redirection():
        obj = Popen(command, shell = True, stdout = PIPE, stderr = PIPE)
    out, err = obj.communicate()
    ret=obj.returncode
    return ret,out,err

PScontent = """
$Task = Get-ScheduledTask -TaskName "%s"
$Path = $Task | select -ExpandProperty TaskPath -first 1
$Settings = $Task.Settings
$Settings.StartWhenAvailable = $false
Set-ScheduledTask -TaskPath "$Path" -TaskName "%s" -Settings $Settings
$Check = Get-ScheduledTask -TaskName "%s"
$Flag = $Check.Settings.StartWhenAvailable
$Flag
"""%(TaskName,TaskName,TaskName)

ps_name='powershell_file.ps1'
ps_path=os.path.join(os.environ['TEMP'], ps_name)
with open(ps_path, 'wb') as wr:
    wr.write(PScontent)
    
with ExecutionPolicy():      
    ret,out,err = ecmd('powershell "%s"'%ps_path)
    
if ret==0:
    if out:
        print(out.strip())
        if "True" in out:
            print("couldn't disable 'Run task as soon as possible after scheduled start is missed' for the taskname - '%s'"%(TaskName))
        elif "False" in out:
            print("successfully disabled 'Run task as soon as possible after scheduled start is missed' for the taskname - '%s'"%(TaskName))
    else:
        print("couldn't find 'Run task as soon as possible after scheduled start is missed' is enabled or disabled for the taskname - '%s'"%(TaskName))
else:
    print(err)

Comments

No Comments.

script to disable 'Run task as soon as possible after scheduled start is missed' for given Scheduled TaskName

Comments

Leave a Comment