Local Security Policy - ASP_USER - log on as batch job

Posted on 2004-04-28
Medium Priority
Last Modified: 2010-05-18
System: windows xp pro with all service packs and .net framework installed.

We are having a problem with a scheduled task running.
I have seached all over and I have found a site that outlines the problem we are having.




When a scheduled task is supposed to run, we check it the next day and it says "could not start"
We have tracked the problem down to the account the scheduled task is supposed to run under is not listed in the 'Log on as batch job' section of the local security policy.

I would change this to correct the problem, however, it is uneditable... the only user listed is asp_user and the boxes that would be used to add other users are grayed-out and those options are not available.

Here is a link to a screen shot of the window I am referring to:

We've been tracking this problem for months and it seems that we are getting close to the answer, but now we are stuck not being able to change the settings for the 'log on as batch job'

Why would this security setting be locked out from being able to edit it?
We need to be able to add other users the ability to log on as batch job.
Question by:toedrag
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
LVL 67

Expert Comment

ID: 10938845
Are you logging on as administrator?
Have you tried via Start->Run->GPedit.msc ??

Author Comment

ID: 10938936
We are logged on as administrator.
I need to be able to edit a setting in the Local Security Policy.
I am able to edit the Group Policy, but just that one setting in the Local Security Settings is not able to be edited.
LVL 67

Expert Comment

ID: 10939028
Click Start->Run->%Systemroot% <enter>
Right-click on the Security folder and choose properties.
Check the security tab for specific permissions for your administrative account - perhaps a write/full control permission is missing for some reason?
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users


Author Comment

ID: 10939473
Administrators have control of that directory.
The problem  seems more to do with not being able to edit that one specific setting.

Author Comment

ID: 10960041
This problem is also happening one our intranet server (windows 2003 server with .net framework installed) - we are also unable to edit that setting in the local security policy.

I can't find any answers to this on the internet and need help bad - it is critical that these scheduled tasks run.
LVL 67

Expert Comment

ID: 10965502
I wonder if you can set the schedule service back to local system account?
At least for testing purposes.
Does the scheduled job need network access?

Author Comment

ID: 10976658
I have tried to set it to run as local system, local admin, domain admin.... you name it, I have tried the account.

I would say the problem seems to be that the accounts that I have tried are not listed in the local security policy with permission to run batch jobs.



Author Comment

ID: 10977607
I figured this out on my own.
The policy was locked out because a higher up policy was taking priority over it.
Once I changed the higher policy, I ran gpupdate /force on the workstations and they then had the settings I needed.

LVL 67

Expert Comment

ID: 11054119
Please see:

Accepted Solution

modulo earned 0 total points
ID: 11557952
PAQed, with points refunded (500)

Community Support Moderator

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you build your web application in Visual Studio you'll get at least a few binaries, or .DLL, files in your bin folder. However, there is more compiling to be done. Normally this would happen when an ASP.NET resource within the web site is request…
Migration of Exchange mailbox can be done with the ExProfre.exe tool. But at times, when the ExProfre.exe tool migrates the Exchange Server user profile, it results in numerous synchronization problems. Synchronization error messages appear in the e…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question