Hello,

I have some problem with RunAsUser command.
I modify User rights, as are defined in your documentation.

==> 24x7 User has Trusted Computer Base and File Change Notify
privilege.
This user is on Domain User group

==> User for RunAsUser, has LOG ON AS A BATCH JOB in local strategy.

I have this message :
Create process Failed - 1314 ...

Any idea ?

Please provide the complete error message

: Hello,

: I have some problem with RunAsUser command.
: I modify User rights, as are defined in your documentation.

: ==> 24x7 User has Trusted Computer Base and File Change Notify
: privilege.
: This user is on Domain User group

: ==> User for RunAsUser, has LOG ON AS A BATCH JOB in local strategy.

: I have this message : Create process Failed - 1314 ...

: Any idea ?

: Please provide the complete error message

Create process failed. Return
: code:1314 - A required privilege is not held by the client.

Thank you,

Check 2 things:
1. If you don't have a local user with the same name your domain settings override your local settings so that locally granted "logon as" has n eefect if the domain account doesn't have it
2. If you run it as a service, you will also need to gran "log on as a service" permission.

And finaly, these settings are cached. After making changes make sure to restart the computer or at least do a logoff/logon try.

: Create process failed. Return

: Thank you,

: Check 2 things: 1. If you don't have a local user with the same name your
: domain settings override your local settings so that locally granted
: "logon as" has n eefect if the domain account doesn't have it
: 2. If you run it as a service, you will also need to gran "log on as a
: service" permission.

: And finaly, these settings are cached. After making changes make sure to
: restart the computer or at least do a logoff/logon try.

SE_BATCH_LOGON_NAME privilege = LOGON32_LOGON_BATCH ?

I am ot sure what LOGON32_LOGON_BATCH is. Where did you get it?

: SE_BATCH_LOGON_NAME privilege = LOGON32_LOGON_BATCH ?

: I am ot sure what LOGON32_LOGON_BATCH is. Where did you get it?

In 24x7's documentation :
"The user account specified in
the Run As Another User properties must
have the necessary LOG ON AS A BATCH JOB privilege
(LOGON32_LOGON_BATCH).
This user right is defined in the
Default Domain Controller Group Policy object (GPO)
and in the local security policy of workstations
and servers. By default, only the LocalSystem
account has the privilege to be logged on as
a batch job."

Yes, I guess this is the same thing, LOGON32_LOGON_BATCH appears to be an old name used in WinNT 3.51 and 4.0

: In 24x7's documentation : "The user account specified in
: the Run As Another User properties must
: have the necessary LOG ON AS A BATCH JOB privilege
: (LOGON32_LOGON_BATCH).
: This user right is defined in the
: Default Domain Controller Group Policy object (GPO)
: and in the local security policy of workstations
: and servers. By default, only the LocalSystem
: account has the privilege to be logged on as
: a batch job."