Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

Description

Allows a user to be logged on by means of a batch-queue facility.

For example, when a user submits a job by means of the task scheduler, the task scheduler logs that user on as a batch user rather than as an interactive user.

This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.

By default, only the LocalSystem account has the privilege to be logged on as a batch job.

See also the Deny logon as a batch job policy.