13 January 2012

Scheduled tasks Log in as batch job right fixes

When configuring scheduled task you might run into a problem where the specified user generates the following error:

This tasks requires that the user account specified has Log on as batch job rights.

This issue occurs when the specified user account does not have sufficient rights to start scheduled tasks.  By default users in the following groups have these rights.
  • Administrators
  • Backup Operators
  • Performance Log Users

Fix number one is to add the user account into one of these local groups.

Fix number two involves Group Policy.

The groups and users that have these rights are governed by group policy and the Log on as Batch job setting.

This security setting allows a user to be logged on by means of a batch-queue facility and is provided only for compatibility with older versions of Windows.
For example, when a user submits a job by means of the task scheduler, the task scheduler logs that user on as a batch user rather than as an interactive user.

The setting can be found under: Local computer Policy\Computer Configuration\Windows Security\Security Settings\Local Policies\User Rights Assignments\Log on as Batch job

You can add users or groups to this setting.

Once the change is made you need to force the policy update or wait for it to apply at the next scheduled refresh

To force it run gpupdate.exe /force

No comments:

Post a Comment