Win 2K Pro batch logon

Point value changed by question poster.

The interactive logon right is set by a Group Policy Object. If you are not in a domain, this is in the local GPO.

If you are in a Windows Active Directory domain, then it could be set on the default domain policy, some other policy set domain wide or a policy tied to an Organizational Unit.

So, if you are not the domain administrator, you would need them to modify the policy for you. You need domain administrator-level privileges or have been assigned the rights to edit GPO's to modify this setting.

If you are configuring this for a workstation that isn't part of a domain, you should open the GPO MMC and look for the setting:

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow Logon as a Batch Job

Here you would add either the user or security group (security group is recommended) the right to logon as a batch job.

You would also need to check the setting in Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Access this computer and verify that you have access to the server.

Just as a special treat, this article describes in great detail the difference between a local and domain logon:

http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/Resources/Documentation/windowsserv/2003/all/techref/en-us/w2k3tr_intlg_how.asp

What you can do is try to login via terminal services or better yet connect to the computer by opening Computer Managment from another workstation and go to Action connect to another computer. From there navigate through AD until you find the computer. Once you have that computer opened you can change the settings from there.