Removing Batch Privileges from a User

From Ben's Writing

Using an MMC plug-in

• Run gpedit.msc;
• Go to: Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment;
• Double click Log on as a batch job, and remove the user.

At the command line

NOTE: This assumes you have downloaded the Windows Server 2003 Resource Kit Tools and that they are in your path.

• Run cmd.exe;
• At the prompt type:

ntrights.exe -u condor-reuse-slot1 -r SeBatchLogonRight

See ntrights.exe for more details.