I tried the following command
net user {serviceaccount} /domain
but the command only told me which machines the service account could run on, not whether it had Logon as Batch rights.
is it possible to determine this without any extraordinary rights such as have Remote access?
net user ... /domain
that's probably a rather safe bet.