Knowledge Base

Edit the Local Security Policy on the problem machine:

• Go to Start -> Control Panel -> Administrative Tools -> Local Security Policy;
• Browse down to Local Policies -> User Rights Assignment -> and find Deny logon as a batch job policy;

  

• Double click on this policy and click on Add User or Group;

  

• Click Advanced;
• Click OK, then click Find now and select from the list the user that you specify for Acronis Managed Machine Service, e.g. Administrator:

  

• Click OK several times to finish applying the policy.

(!) If the Add User or Group button is grayed out, then it means that the machine is a part of the domain, and the Deny logon as batch job policy is defined via domain security settings. In this case, please follow the steps from appropriate section.

Restart Acronis Agent services:

• Go to Start -> Run -> services.msc
• Right-click on the following Acronis services, and click on Restart:
  • Acronis Managed Machine Service
  • Acronis Remote Agent
  • Acronis Scheduler2 Service

Ensure that necessary rights are added to the Acronis Services user in the Domain Security Policy:

• On the domain controller go to Start -> Control Panel -> Administrative Tools -> Domain Security Policy
• Browse down to Local Policies -> User Rights Assignment -> and Deny logon as batch job policy:

  

• Double click on the policy, enable the box Define these policy settings and click on Add User or Group:
• Do not click Browse – instead manually type the name of Acronis services account and please do not add the computer name before the account, leave it as shown below. Then click OK:

  

The updated policy must be applied to the domain members: either wait for some time – defined for your domain – for the domain policy to be refreshed and applied to all machines; or force domain policy update to be applied immediately on a particular domain machine:

• Go to Start -> Run -> cmd
• Execute the command:

  gpupdate /force

Ensure that Deny logon as batch job right is added to the <DOMAIN>\<Acronis_services_user> (where <DOMAIN> is the name of your domain and <Acronis_services_user> is the user account that you specify for Acronis services) account in the Domain Controller Security Policy:

• On the domain controller go to Start -> Control Panel -> Administrative Tools -> Domain Controller Security Policy;
• Browse down to Local Policies -> User Rights Assignment -> and find Deny logon as batch job policy:

  

• Double click on this policy, enable the box Define these policy settings and click on Add User or Group:
• Click Browse -> Advanced;
• Click on Locations and make sure your domain is selected as the location to look for the users;
• Click OK, then click Find now and select the necessary user from the list;
• Click OK several times to finish applying the policy;