...
- To manage permissions switch to
- English:
Control panel -> Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment
- German:
Systemsteuerung -> Verwaltung -> Lokale Sicherheitsrichlinie -> Lokale Richtlinien -> Zuweisen von Benutzerrechte
n
- English:
- Then right-click the permission and use the
Properties -> Add user or group
action to add the respective Agent account or target user as explained for the below permissions. - Just in case that you want to dig into details find references about the constants that are used for privileges from the following links:
...
- Permission:
SE_ASSIGNPRIMARYTOKEN_NAME
- English
: Replace a process-level token
- German:
Ersetzen eines Tokens auf Prozessebene
- English
- Permission:
SE_INCREASE_QUOTA_NAME
- English
: Adjust memory quotas for a process
- German:
Anpassen von Speicherkontingenten für einen Prozess
- English
Load target user profile
Then right-click the permission and use the Properties -> Add user or group
action to add the respective Agent account as explained for the above permissions.
Load target user profile
If the profile of the target user should If the profile of the target user should be loaded then the Agent account requires the Administrator
role, see LoadUserProfile, and the following permissions:
- Permission:
SE_BACKUP_NAME
- English:
Back up files and directories
- German:
Sichern von Dateien und Verzeichnissen
- English:
- Permission:
SE_RESTORE_NAME
- English:
Restore files and directories
- German:
Wiederherstellen von Dateien und Verzeichnissen
- English:
Hints
Right-click the permission and use the Properties -> Add user or group
action to add the respective Agent account as explained for the above permissions.
Restart the JobScheduler Agent Windows Service in order to apply changes to roles and permissions.
...
- Permission:
SE_BATCH_LOGON_NAME
- English:
Log on as a batch job
- German:
Anmelden als Stapelverarbeitungsauftrag
- English:
Hints
Right-click the permission and use the Properties -> Add user or group
action to add the respective target user as explained for the above permissions.
Job Configuration
Jobs that should be executed for a target user have to be assigned the credentials key that has previously been stored with the Credential Manager for the Agent account. A resulting job could look like this:
...