27

I have created a basic task in Task Scheduler on Windows Server 2008 R2. When I try saving the task, I get the following message:

This task requires that the user account specified has Log on as batch job rights.

Is this right a part of the user permissions defined inside Active Directory, or is it a permission that I need to define separately on the local Windows VM?

1

3 Answers 3

14

This is a user right that's applicable to the local system. You can grant the right locally or define it in a GPO that applies to the system in question.

4
  • 14
    now what I did is that inside the local vm I opened secpol.msc and I define the user under the "local policy >> User Rights Assignment>>Log on as a Batch job" and now the user is able to run scheduled jobs.. so is this a valid approach ? I though this permission will be part of the user active directory profile..
    – John John
    Commented Apr 7, 2016 at 15:27
  • 2
    That is a valid approach and no, it's not part of a user's profile or AD account.
    – joeqwerty
    Commented Apr 7, 2016 at 15:29
  • 2
    I found @deadlydog's answer to be more useful. serverfault.com/a/1021089/121200
    – matty
    Commented Oct 17, 2022 at 13:07
  • This answer is somewhat useful, but would benefit from explaining how to assign that right.
    – TylerH
    Commented Jun 12 at 21:21
19

Had the same issue today. I added the user to:

Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment -> Log on as a batch job

But was still getting the error. I found this post, and it turns out there's also this setting that I had to remove the user from (not sure how it got in there):

Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment -> Deny log on as a batch job

2
  • This is a great answer. In case you got here trying to setup a task on your windows home edition - remember you're not going to find the local security policy on it. The group policy editor is only available on the pro version
    – Dr Phil
    Commented Nov 20, 2023 at 15:04
  • @DrPhil This is a website for server administration so it stands to reason that users on here are asking questions in the context of server versions of Windows.
    – TylerH
    Commented Jun 12 at 21:25
0

In my case, it was due to my having a local user and a domain user with the same username, and trying to create the windows task with the wrong user. One had the rights described in the other answers (GPO, Admin Tools), and one did not.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .