"This task requires that the account specified has log on as batch job rights"

This task requires that the account specified has log on as batch job rights

Sometimes while scheduling a task in Windows Server 2008 or above you might receive the following error prompt not allowing you to do the same.

The resolution for the same can be 2 folded:

1. Start -> Run-> Type in secpol.msc /s
2. Select "Local Policies" in MMCsnap in
3. Select "User Rights Assignment"
4. Right click on "Log on as batch job" and select Properties
5. Click "Add User or Group", and include the relevant user.

But, in my case the Add User or Group option was grayed out.

Cause:
This is because the policy is overwritten by some particular domain policy. You need to find that policy and edit it.

Resolution:


1. Run rsop.msc on the domain controller.
2. Navigate to [Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment: Log on as a batch job]
3. Double click to open "Log on as a batch job" and check the Precedence tab.

Here, you can see the conflicting policy. In my case, it was Default Domain Controller Policy.

1. Open the Group Policy Management Console
2. Navigate to the Default Domain Controller Policy and click Edit
3. Navigate to [Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment: Log on as a batch job] and now add the user.