18

I have created a basic task under our windows server 2008 r2 Task Scheduler.but when I try saving the task I got the following error:-

This task requires that the user account specified has Log on as batch job rights.

now I am not sure if this right is part of the user permission defined inside active directory.. or this is a permission that I need to define separately on the local windows VM ?? can anyone advice on this please?

Thanks

John John
  • 339
  • 1
  • 4
  • 12

3 Answers3

13

This is a user right that's applicable to the local system. You can grant the right locally or define it in a GPO that applies to the system in question.

joeqwerty
  • 108,377
  • 6
  • 80
  • 171
  • 12
    now what I did is that inside the local vm I opened secpol.msc and I define the user under the "local policy >> User Rights Assignment>>Log on as a Batch job" and now the user is able to run scheduled jobs.. so is this a valid approach ? I though this permission will be part of the user active directory profile.. – John John Apr 07 '16 at 15:27
  • 2
    That is a valid approach and no, it's not part of a user's profile or AD account. – joeqwerty Apr 07 '16 at 15:29
5

Had the same issue today. I added the user to:

Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment -> Log on as a batch job

But was still getting the error. I found this post, and it turns out there's also this setting that I had to remove the user from (not sure how it got in there):

Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment -> Deny log on as a batch job

deadlydog
  • 303
  • 1
  • 5
  • 9
0

In my case, it was due to my having a local user and a domain user with the same username, and trying to create the windows task with the wrong user. One had the rights described in the other answers (GPO, Admin Tools), and one did not.