Log On As Batch Job Rights

Log On As Batch Job Rights

In DEVOS, there is a scheduled task that runs in the background that runs all of the file and account management procedures for the DEVOS system. This scheduled task is run by an administrator account on the server. When the DEVOS server is connected to a domain, however, it is best practice for this task to run under a domain account installed as a local administrator on the server. The domain account does not have to be a domain administrator, but it does at least have to have a permission setting called "Log on as batch job rights". If it does not, it may not be able to run the procedures properly. If new accounts are not being properly assigned their privileges or if new videos uploaded into the system or live stream recordings are not being processed, this may be the problem. 

Solution: Follow these steps to ensure the account has Log on as batch job rights.
  1. Go to the Start menu
  2. Run
  3. Type secpol.msc and press Enter
  4. The Local Security Policy manager opens
  5. Go to Security Settings – Local Policies – User Rights Assignment node
  6. Double click Log on as a batch job on the right side
  7. Click Add User or Group…
  8. Select the user and click OK

If you find this setting grayed out, this means a policy is controlling it. 9 times out of 10 it’s this policy: Default Domain Controllers Policy. You can head to Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment and make the change instead of going through the Local Security Policy.
Save this and try to trigger your task again. There’s a good chance it will work this time, if this is the only issue.