Hi folks. I am seeing a funny thing when trying to add "Log on as batch job" rights to a particular user. This user I want configured in a task scheduled to run daily on a server.
When I go into secpol.msc -> Local Policies -> User Rights Assignment -> Log on as batch job properties, the Add User or Group button is greyed out but there is a number of users in the list. This tells me there is another policy overriding this one...
Now, I open up Group Policy Management and navigate to the Default Domain Policy within the domain, I right click and select Edit on the policy. I navigate to Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment -> Log on as batch job properties, the Add User or Group button is greyed out but will un-grey itself when I click the "Define these policy settings" check box. If I add the user to this window, the user does NOT show up in the other list in secpol and all those users that were in there vanish.
I since removed the user and unchecked Define these policy settings and the other users re-appeared. What am I missing? Is there another policy somewhere else I do not see?
thanks!
When I go into secpol.msc -> Local Policies -> User Rights Assignment -> Log on as batch job properties, the Add User or Group button is greyed out but there is a number of users in the list. This tells me there is another policy overriding this one...
Now, I open up Group Policy Management and navigate to the Default Domain Policy within the domain, I right click and select Edit on the policy. I navigate to Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment -> Log on as batch job properties, the Add User or Group button is greyed out but will un-grey itself when I click the "Define these policy settings" check box. If I add the user to this window, the user does NOT show up in the other list in secpol and all those users that were in there vanish.
I since removed the user and unchecked Define these policy settings and the other users re-appeared. What am I missing? Is there another policy somewhere else I do not see?
thanks!
