How to determine if a Service account has login as batch rights to a server

Posted on

QUESTION :

I tried the following command

net user {serviceaccount} /domain

but the command only told me which machines the service account could run on, not whether it had Logon as Batch rights.

is it possible to determine this without any extraordinary rights such as have Remote access?

ANSWER :

For the current user you can use whoami /priv to determine the privileges. To determine the privileges of another account, you need something like Sysinternals’ AccessChk.

accesschk -a ACCOUNT *

Leave a Reply

Your email address will not be published.