time-clock-circle multiple-users-1 bin-paper-1 smiley-indifferent view-off alert-diamond envelope-letter rating-star network-browser pencil-write ticket-1 button-record headphones-customer-support close synchronize-arrows-1 common-file-stack close-quote arrow-down-2 multiple-circle attachment-1 folder-file-1 disable smiley-indifferent shield-warning love-it smiley-smile-1_1 check-circle-1 time-clock-midnight floppy-disk view smiley-unhappy book-star lock-unlock-1 arrow-right-1 archive smiley-unhappy send-email-1 hierarchy-9 open-quote add-circle-bold search remove-circle cog-1 filter-1 hyperlink-2 analytics-pie-2 flying-insect-honey navigation-menu-horizontal pencil-1 smiley-thrilled check-1 arrow-up-1 lock-2 navigation-menu add layout-module-1 archive arrow-left-1 wench arrow-down-1 multiple-neutral-1 expand-6 close drawer-send alarm-bell-1 social-media-twitter keyboard-arrow-up ticket-1 copy-paste rating-star download-thick-bottom information-circle smiley-sad-1 single-neutral-actions remove-square-1 file-code pencil-1 keyboard-arrow-down smiley-sad-1 cog single-neutral add-circle move-to-top list-bullets expand-6 undo tags-double smiley-happy view-1 messages-bubble-square print-text add-square smiley-happy credit-card-1 envelope-letter diagram-fall-down

How to add 'Log on as batch job' on Domain Controller

'Log on as a batch job' permission is required to run a backup scheduled task.

On Domain Controllers, the Local Security Policy (secpol.msc) cannot be used to configure 'Log on as a batch job' rights for domain account configure to run the backup job.  The option is greyed out.

 

 

Use Group Policy Management to configure the setting while logged on to the Domain Controller as a Domain Admin user.

Navigate to:

Group Policy Manager -> Forest: [your_domain] -> Domains -> [your_domain] -> Domain Controllers -> Default Domain Contollers Policy

 

 

Right-click and select Edit... to open the Group Policy Manager Editor.

 

 

Navigate to:

Default Domain Controllers Policy -> Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment

Select the 'Log on as a batch job' policy and edit Properties to Add User or Group to the setting.