Does it have rights to execute cmd.exe?

http://support.microsoft.com/?kbid=867466

When you run a batch job that runs under the context of a regular user account 
on a Microsoft Windows Server 2003-based computer, the script may not run. If 
you run the batch job by using the Scheduled Tasks feature, the following error 
message may be logged in the Scheduled Tasks log file 
(Schedlgu.txt):0x80070005: Access is denied.

This issue occurs if all the following conditions are true:

You run the batch job on a Windows Server 2003-based member server.
The batch job runs as a non-interactive process.
The batch job is configured to run under the context of an account that is not 
a member of the Administrators group.




-----Original Message-----
From: Kurt Buff [mailto:[email protected]] 
Sent: Wednesday, November 04, 2009 5:23 PM
To: NT System Admin Issues
Subject: Re: Something glaringly obvious, I'm sure...

It's been assigned 'log on as a batch job' permission - that happened
when I set up the job, AFAICT.

Perhaps I missed some other permission?

Just for grins, where's what else I know:

The account is a member of Domain Users only.

The scheduled task log entry says:

"Backup.job" (backup.cmd) 11/4/2009 5:00:00 PM ** ERROR **
       Unable to start task.
       The specific error is:
       0x80070005: Access is denied.
       Try using the Task page Browse button to locate the application.

But, the log file is a bit wonky - the service doesn't seem to write
to it in a structured manner. I had to search for this entry - it's in
the middle of the log file, for some reason.

On the file server, I've given the account no particular rights, except
    read-only at the top level of the partition where the files are copied (L:)
    read-write to the directory in which files are copied (L:\backups)
    read-only to c:\batchfiles\ and c:\batchfiles\tools for the
batchfile and the robocopy executable
    read-write to c:\batchfiles\logs for writing the log file.

Kurt

On Wed, Nov 4, 2009 at 18:04, Free, Bob <[email protected]> wrote:
> User rights assigned? e.g.- Log on as a batch job. Computer 
> Configuration\Windows Settings\Security Settings\Local Policies\User Rights 
> Assignment
>
> -----Original Message-----
> From: Kurt Buff [mailto:[email protected]]
> Sent: Wednesday, November 04, 2009 5:01 PM
> To: NT System Admin Issues
> Subject: Something glaringly obvious, I'm sure...
>
> All,
>
> I've created a domain account as a service account for a copy job from
> an application server to our file server, but it's giving me fits
> trying to schedule it.
>
> Both servers are Win2k3 R2, with patches, in our Win2k3 domain.
>
> I can log into the console on the file server as the service account
> and launch the batch file, with no problems. However, the scheduled
> task will not start - it just says in the status column "Could not
> start" with a last result code of 0x0, though one time I found a 0x2.
> I have no idea what that code means, even after much googling, and I
> only found it once, while adjusting permissions, so it might be a red
> herring.
>
> The scheduled task for this is a multiple schedule item, occurring
> three times a day, if that makes a difference.
>
> I don't find anything interesting in the event logs, either - just a
> 528/538 combo in the security log at the scheduled time.
>
> Any thoughts on where I should start looking?
>
>
> Thanks,
>
> Kurt
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to