Resolving SBS 2011 BPA Warning – Administrator Rights for Batch Jobs

This post describes how to resolve the following warning when running the Best Practices Analyzer for SBS 2011 (or SBS 2008):

The built-in Administrators group does not have the right to log on as batch job

Although this it is just a warning, I would advise resolving his issue, which requires a single update to a Group Policy setting. You will see this if you have done a migration to SBS 2011 (or SBS 2008).

Steps:

• Click on Start –> Administrative Tools –> Group Policy Management
• Drill down Forest: domain.local–> Domains –> domain.local –> Domain Controllers –> Default Domain Controllers Policy
• Right click on Default Domain Controllers Policy, then click Edit
  
• The Group Policy Management Editor window displays
• Drill down Computer Configuration –> Policies –> Window Settings –> Security Settings –> User Rights Assignment
  
• In the right hand pane, locate the policy: Log on as a batch job
• Right click on this policy, and then click Properties
• Click Add User or Group –> Click Add and then add the Administrators group to this policy
  
• Verify that the Administrators group has been added to the list
  

That’s it. No reboot or restart of any services is required. Rerun BPA and that warning message should be gone.

Here is the Microsoft TechNet article describing this issue.