Identifying scheduled tasks running as alternate users