Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • To manage permissions switch to 
    • English: Control panel -> Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment
    • German: Systemsteuerung -> Verwaltung -> Lokale Sicherheitsrichlinie -> Lokale Richtlinien -> Zuweisen von Benutzerrechten
  • Then right-click the permission and use the Properties -> Add user or group action to add the respective Agent account or target user as explained for the below permissions.
  • Just in case that you want to dig into details find references about the constants that are used for privileges from the following links:

...

  • Permission: SE_ASSIGNPRIMARYTOKEN_NAME
    • English: Replace a process-level token
    • German: Ersetzen eines Tokens auf Prozessebene
  • Permission: SE_INCREASE_QUOTA_NAME
    • English: Adjust memory quotas for a process 
    • German: Anpassen von Speicherkontingenten für einen Prozess

Load target user profile

Then right-click the permission and use the Properties -> Add user or group action to add the respective Agent account as explained for the above permissions.

Load target user profile

If the profile of the target user should If the profile of the target user should be loaded then the Agent account requires the Administrator role, see LoadUserProfile, and the following permissions:

  • Permission: SE_BACKUP_NAME
    • English: Back up files and directories 
    • German: Sichern von Dateien und Verzeichnissen
  • Permission: SE_RESTORE_NAME
    • English: Restore files and directories
    • German: Wiederherstellen von Dateien und Verzeichnissen

Hints

Right-click the permission and use the Properties -> Add user or group action to add the respective Agent account as explained for the above permissions.

Restart the JobScheduler Agent Windows Service in order to apply changes to roles and permissions.

...

  • Permission: SE_BATCH_LOGON_NAME
    • English: Log on as a batch job 
    • German: Anmelden als Stapelverarbeitungsauftrag

Hints

Right-click the permission and use the Properties -> Add user or group action to add the respective target user as explained for the above permissions.

Job Configuration

Jobs that should be executed for a target user have to be assigned the credentials key that has previously been stored with the Credential Manager for the Agent account. A resulting job could look like this: 

...