Locating the SeBatchLogonRight (Logon as Batch job) value in WMI RRS feed

  • Question

  • I've asked this question in the Group Policy forum, but was asked to post here.  Hopefully an answer to this can be found.

    I'm attempting to find the state of the Logon as Batch group policy setting via script, specficially Powershell's Get-WMIObject cmdlet.  The closest class that I have found so far with settings contained in the User Rights Assignment is RSOP_UserPrivilegeRight in the "root\RSOP\Computer" namespace.  Unfortunately, the only option containing any reference to batch jobs is the SeDenyBatchLogonRight constant.  So I can find where to block the right, but not where to grant it.

    PS C:\WINDOWS\system32> Get-WmiObject RSOP_UserPrivilegeRight -namespace "root\RSOP\Computer" | ? {$_.UserRight -match "Batch"}


    I know of the NTRIGHTS.EXE utility, but this does not give me the option to simply query a computer and find the state of the Logon As Batch Job policy.  That is what I'm after.  If anyone could provide some assistance as to the location of where this value is stored, it would be greatly appreciated.
    Friday, August 9, 2013 10:49 AM

All replies

  • Hi,

    According to your description, the question is more related to the Powershell. This is still the group policy forum, and I have helped move the case to the Powershell forum. Hope you can find your answer there.

    Best regards,

    Frank Shen
    Monday, August 12, 2013 6:00 AM