1

I tried the following command

net user {serviceaccount} /domain

but the command only told me which machines the service account could run on, not whether it had Logon as Batch rights.

is it possible to determine this without any extraordinary rights such as have Remote access?

2
  • are we to assume this is Windows?
    – Moab
    Sep 17, 2012 at 18:25
  • With a command net user ... /domain that's probably a rather safe bet. Sep 17, 2012 at 18:46

1 Answer 1

2

For the current user you can use whoami /priv to determine the privileges. To determine the privileges of another account, you need something like Sysinternals' AccessChk.

accesschk -a ACCOUNT *
3
  • I want to check to see if Service Acct "A" has Logon As Batch rights on Server "B". Do I have to run this SysInternals command on the server "B" to determine this? I presume so.
    – Ivan
    Sep 17, 2012 at 20:53
  • Yes. AccessChk does not have a "remote" option. If you want to run it remotely, you're going to need something like PsExec. Sep 17, 2012 at 22:48
  • Specifically, AccessChk will return the string SeBatchLogonRight if it has the privilege. Dec 15, 2021 at 15:51

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .