add-circle-bold add-circle add-square add alarm-bell-1 alert-diamond analytics-pie-2 archive archive arrow-down-1 arrow-down-2 arrow-left-1 arrow-right-1 arrow-up-1 attachment-1 bin-paper-1 book-star button-record check-1 check-circle-1 close close-quote close cog-1 cog common-file-stack copy-paste credit-card-1 diagram-fall-down disable time-clock-midnight download-thick-bottom drawer-send envelope-letter envelope-letter expand-6 expand-6 file-code filter-1 floppy-disk flying-insect-honey folder-file-1 headphones-customer-support hierarchy-9 hyperlink-2 information-circle keyboard-arrow-down keyboard-arrow-up layout-module-1 list-bullets lock-2 lock-unlock-1 love-it messages-bubble-square move-to-top multiple-circle multiple-neutral-1 multiple-users-1 navigation-menu-horizontal navigation-menu network-browser open-quote pencil-1 pencil-write pencil-1 print-text rating-star rating-star remove-circle remove-square-1 search send-email-1 shield-warning single-neutral-actions single-neutral smiley-sad-1 smiley-unhappy smiley-indifferent smiley-smile-1_1 smiley-happy smiley-sad-1 smiley-unhappy smiley-indifferent smiley-happy smiley-thrilled social-media-twitter synchronize-arrows-1 tags-double ticket-1 ticket-1 time-clock-circle undo view-1 view-off view wench

How to add 'Log on as batch job' on Domain Controller

'Log on as a batch job' permission is required to run a backup scheduled task.

On Domain Controllers, the Local Security Policy (secpol.msc) cannot be used to configure 'Log on as a batch job' rights for domain account configure to run the backup job.  The option is greyed out.

 

 

Use Group Policy Management to configure the setting while logged on to the Domain Controller as a Domain Admin user.

Navigate to:

Group Policy Manager -> Forest: [your_domain] -> Domains -> [your_domain] -> Domain Controllers -> Default Domain Contollers Policy

 

 

Right-click and select Edit... to open the Group Policy Manager Editor.

 

 

Navigate to:

Default Domain Controllers Policy -> Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment

Select the 'Log on as a batch job' policy and edit Properties to Add User or Group to the setting.