I have created a basic task under our windows server 2008 r2 Task Scheduler.but when I try saving the task I got the following error:-

This task requires that the user account specified has Log on as batch job rights.

now I am not sure if this right is part of the user permission defined inside active directory.. or this is a permission that I need to define separately on the local windows VM ?? can anyone advice on this please?



3 Answers 3


This is a user right that's applicable to the local system. You can grant the right locally or define it in a GPO that applies to the system in question.

  • 12
    now what I did is that inside the local vm I opened secpol.msc and I define the user under the "local policy >> User Rights Assignment>>Log on as a Batch job" and now the user is able to run scheduled jobs.. so is this a valid approach ? I though this permission will be part of the user active directory profile..
    – John John
    Apr 7, 2016 at 15:27
  • 2
    That is a valid approach and no, it's not part of a user's profile or AD account.
    – joeqwerty
    Apr 7, 2016 at 15:29

Had the same issue today. I added the user to:

Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment -> Log on as a batch job

But was still getting the error. I found this post, and it turns out there's also this setting that I had to remove the user from (not sure how it got in there):

Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment -> Deny log on as a batch job


In my case, it was due to my having a local user and a domain user with the same username, and trying to create the windows task with the wrong user. One had the rights described in the other answers (GPO, Admin Tools), and one did not.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.