QUESTION :
I tried the following command
net user {serviceaccount} /domain
but the command only told me which machines the service account could run on, not whether it had Logon as Batch rights.
is it possible to determine this without any extraordinary rights such as have Remote access?
ANSWER :
For the current user you can use whoami /priv
to determine the privileges. To determine the privileges of another account, you need something like Sysinternals’ AccessChk.
accesschk -a ACCOUNT *