Logon failure: the user has not been granted the requested logon type at this computer. (0x80070569)

If you receive this error from the Windows Task Scheduler then it means the user account does not have the logon right (Log on as a batch job, SeBatchLogonRight) required to run scheduled tasks. Administrator accounts usually have this logon right, but standard users typically do not. As an administrator you can give this logon right to a non-admin user. 

Note that this does not make the account an administrator. It just gives the account the ability to use the task scheduler in Windows.

If you cannot give the account the logon right, or do not wish to, then one option is to configure to schedule to run only when the user is logged on. Alternatively, you could set the profile to run when the users logs in. Running a profile on logout is not recommended or even possible in many situations. This is because Windows aggressively acts against programs that slow or stop the logoff process from happening in a timely manner.

To give a user the necessary logon right:

  • Log in as an administrator user
  • Go to Control Panel -> Administrative Tools -> Local Security Policy
  • Expand the tree on the left to show Local Policies -> User Rights Assignment
  • Double-click on "Log on as batch job" on the right
  • Click the "Add User or Group..." button and add the user. Note: you probably need to add the user specifically; adding a Group (of which the user is a member) may not be sufficient.
  • Bear in mind that the user (or any Group he is a member of) may be configured so that this privilege is specifically denied ('Deny log on as a batch job', or similar). Generally, Windows deems restrictions as overriding permissions in any conflict

If you are using Windows 7 Home (or a non-Professional version of Windows) then you may have to use a different method because Microsoft has removed the Local Security Policy applet from that version of Windows:

  • Download the Windows 2003 Resource Kit
  • Run the installer as Administrator
  • Ignore the message that it has known incompatibilities with Windows 7 and install it anyway. There are other tools in the resource kit that may not be compatible, but we are only going to use one of them (ntrights) and that is compatible.
  • Run a command prompt as Administrator (Start > All Programs > Accessories, then Right Click on "Command Prompt" and choose "Run as Administrator")
  • Navigate to the installation directory for the resource kit. In a default installation, you would type:

    If you are using a 64-bit version of the resource kit: cd "C:\Program Files\Windows Resource Kits\Tools"
    If you are using a 32-bit version of the resource kit: cd "C:\Program Files (x86)\Windows Resource Kits\Tools"

  • Issue the NTRIGHTS command as follows:

    ntrights -u USERNAME +r SeBatchLogonRight

    Where you replace USERNAME with the correct username. Then you are done.

  • The SeBatchLogonRight option is not listed if you type ntrights -h, but it is documented in NTRIGHTS (2003 Resource Kit)