Local Security Policy - ASP_USER - log on as batch job

System: windows xp pro with all service packs and .net framework installed.


We are having a problem with a scheduled task running.
I have seached all over and I have found a site that outlines the problem we are having.

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/545.asp

and...

http://www.annoyances.org/exec/forum/win2000/1029775337

When a scheduled task is supposed to run, we check it the next day and it says "could not start"
We have tracked the problem down to the account the scheduled task is supposed to run under is not listed in the 'Log on as batch job' section of the local security policy.

I would change this to correct the problem, however, it is uneditable... the only user listed is asp_user and the boxes that would be used to add other users are grayed-out and those options are not available.

Here is a link to a screen shot of the window I am referring to:
http://www.tuscano.com/batchuser.gif

We've been tracking this problem for months and it seems that we are getting close to the answer, but now we are stuck not being able to change the settings for the 'log on as batch job'

Why would this security setting be locked out from being able to edit it?
We need to be able to add other users the ability to log on as batch job.
toedragAsked:
Who is Participating?
 
moduloConnect With a Mentor Commented:
PAQed, with points refunded (500)

modulo
Community Support Moderator
0
 
sirbountyCommented:
Are you logging on as administrator?
Have you tried via Start->Run->GPedit.msc ??
0
 
toedragAuthor Commented:
We are logged on as administrator.
I need to be able to edit a setting in the Local Security Policy.
I am able to edit the Group Policy, but just that one setting in the Local Security Settings is not able to be edited.
Thanks
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
sirbountyCommented:
Click Start->Run->%Systemroot% <enter>
Right-click on the Security folder and choose properties.
Check the security tab for specific permissions for your administrative account - perhaps a write/full control permission is missing for some reason?
0
 
toedragAuthor Commented:
Administrators have control of that directory.
The problem  seems more to do with not being able to edit that one specific setting.
0
 
toedragAuthor Commented:
This problem is also happening one our intranet server (windows 2003 server with .net framework installed) - we are also unable to edit that setting in the local security policy.

I can't find any answers to this on the internet and need help bad - it is critical that these scheduled tasks run.
0
 
sirbountyCommented:
I wonder if you can set the schedule service back to local system account?
At least for testing purposes.
Does the scheduled job need network access?
0
 
toedragAuthor Commented:
I have tried to set it to run as local system, local admin, domain admin.... you name it, I have tried the account.

I would say the problem seems to be that the accounts that I have tried are not listed in the local security policy with permission to run batch jobs.

Thanks

0
 
toedragAuthor Commented:
I figured this out on my own.
The policy was locked out because a higher up policy was taking priority over it.
Once I changed the higher policy, I ran gpupdate /force on the workstations and they then had the settings I needed.

Thanks
0
 
sirbountyCommented:
Please see:
http:help.jsp#hs5
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.