Sun, Jan 30 2011 23:23
Step 34 - giving the Adminstrators group the rights they need
Next up is clean up time... first up we need to give the built in admin the right to log on as a batch job.
Give the built-in Administrator group the right to log on as a batch job for migration
After you migrate, you should give the Administrator group the right to log on as a batch job.
After you migrate an existing Windows SBS 2003 domain to Windows SBS 2011, verify that the built-in Administrator group still has the right to log on as a batch job to the Destination Server. Administrators need this right in order to run an alert on the Destination Server without logging on.
To give the built-in Administrator group the right to log on as a batch job
1. On the Destination Server, click Start, click All Programs, and then click Administrative Tools.
2. In the Administrative Tools menu, select Group Policy Management.
3. In the Group Policy Management console tree, click Forest: <ServerName>, and then click Domains.
4. Click the name of your server, expand Domain Controllers, right-click Default Domain Controllers Policy, and then click Edit.
5. In the Group Policy Management Editor, click Default Domain Controllers Policy <ServerName> Policy, expand Computer Configuration, and then click Policies.
6. In the Policies tree, expand Windows Setting, and then click Security Settings.
7. In the Security Settings tree, expand Local Policies, and then click User Rights Assignment.
8. In the results pane, scroll to and then click Log on as a batch job.
9. In the Log on as a batch job Properties dialog box, click Add User or Group.
10. In the Add User or Group dialog box, click Browse.
11. In the Select Users, Computers, or Groups dialog box, type Administrators.
12. Click Check Names to verify that the Administrators group appears, and then click OK three times.
Filed under: sbs 2011 migration steps