+ Post New Thread
Results 1 to 3 of 3
Windows Thread, Log on as batch job in Technical; I've got two local user accounts on a server that I added to GP so that they could log on ...
  1. #1

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,114
    Thank Post
    403
    Thanked 619 Times in 566 Posts
    Rep Power
    180

    Log on as batch job

    I've got two local user accounts on a server that I added to GP so that they could log on locally as a batch job. However, since the users do not exist on other servers it caused an error in event viewer. How would I go about adding the users without getting this error? I've tried doing it just on the local server but since it's under the control of the GP it's greyed out.

    Hope I'm making sense!

  2. #2

    Join Date
    Jul 2007
    Location
    Nottingham
    Posts
    195
    Thank Post
    19
    Thanked 7 Times in 7 Posts
    Rep Power
    16
    A quick way around this is to create a new GPO with the Logon as Batch Job settings, link the GPO to the appropriate OU in your domain and then edit the security permissions on the GPO and remove the "Apply Group Policy" permission for "Authenticated Users", this can be done in the Group Policy Management Console, select the GPO, click the Delegation tab and click advanced. Then add the computer account to the GPO Security settings and give it Read and Apply Group Policy permissions.

    The GPO will then be within the scope of the computers in the OU, but only the computer(s) you specify in the permissions will apply the GPO.

  3. #3

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,114
    Thank Post
    403
    Thanked 619 Times in 566 Posts
    Rep Power
    180
    Quote Originally Posted by dan400007 View Post
    A quick way around this is to create a new GPO with the Logon as Batch Job settings, link the GPO to the appropriate OU in your domain and then edit the security permissions on the GPO and remove the "Apply Group Policy" permission for "Authenticated Users", this can be done in the Group Policy Management Console, select the GPO, click the Delegation tab and click advanced. Then add the computer account to the GPO Security settings and give it Read and Apply Group Policy permissions.

    The GPO will then be within the scope of the computers in the OU, but only the computer(s) you specify in the permissions will apply the GPO.
    I am wary of doing this since we've got an RM system and there's no telling what this, seemingly simple, change could do.

    I'm thinking I could either ignore the errors, which shouldn't cause any problems, or add the users onto each server as local users? That would work?

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 15
    Last Post: 24th November 2009, 11:17 AM
  2. Log on as batch job
    By ajames in forum Windows Server 2008
    Replies: 0
    Last Post: 29th April 2009, 12:32 PM
  3. clear old cookies on log off (or log on)
    By ZeroHour in forum Scripts
    Replies: 0
    Last Post: 4th November 2008, 09:32 AM
  4. New Job / Change In Current Job
    By FN-GM in forum Educational IT Jobs
    Replies: 10
    Last Post: 28th April 2008, 05:08 PM
  5. Can log on Local can't log on to domain
    By speckytecky in forum Network and Classroom Management
    Replies: 16
    Last Post: 25th April 2008, 12:05 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •