Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I tried the following command

net user {serviceaccount} /domain

but the command only told me which machines the service account could run on, not whether it had Logon as Batch rights.

is it possible to determine this without any extraordinary rights such as have Remote access?

share|improve this question
are we to assume this is Windows? – Moab Sep 17 '12 at 18:25
With a command net user ... /domain that's probably a rather safe bet. – Ansgar Wiechers Sep 17 '12 at 18:46
up vote 1 down vote accepted

For the current user you can use whoami /priv to determine the privileges. To determine the privileges of another account, you need something like Sysinternals' AccessChk.

accesschk -a ACCOUNT *
share|improve this answer
I want to check to see if Service Acct "A" has Logon As Batch rights on Server "B". Do I have to run this SysInternals command on the server "B" to determine this? I presume so. – Chad Sep 17 '12 at 20:53
Yes. AccessChk does not have a "remote" option. If you want to run it remotely, you're going to need something like PsExec. – Ansgar Wiechers Sep 17 '12 at 22:48

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.