What workaround did the author discover to register a scheduled task in a GPO using command line?
The author discovered that GPO backup files contain registration information for scheduled tasks. By first backing up the GPO, modifying the Backup.xml and gpreport.xml files to include registration data, creating the ScheduledTasks.xml, and then restoring the GPO using Import-GPO, the scheduled task becomes properly registered and can be executed remotely. This indirect method effectively bypasses the lack of a direct command-line registration command. For a related approach, see Domain Penetration - Remote Execution via Scheduled Tasks in GPO.
backuprestoreregistrationGPOImport-GPOworkaround