I've been having a major headache with Windows Task Scheduler lately. My scheduled task stopped working out of the blue, and the error message I kept seeing was, "User has not been granted the request logon type." This bugged me for over a week! The task was supposed to copy files to a network location with a batch script, and it just stopped. I tried all sorts of advice from the internet, like making sure it's allowed in group policy for batch jobs, denying local login restrictions, using UNC paths instead of drive letters, and even checking or unchecking the "run with highest privileges" option. The weird thing is, it would still work when run interactively! Eventually, I discovered that LSA protection had been enabled, which was breaking things. I ended up removing a specific registry key and rebooting, and that seemed to fix the issue. I'm not sure if putting the service account in the protected users security group would have worked too, but it's something to consider. I just want to help others who might be facing this problem instead of flooding the forum with endless updates. Hope this helps!
2 Answers
While I understand the need for a quick fix, I'm a bit concerned about your approach. Disabling security features is usually not advisable. It might be more useful to investigate why LSA protection was enabled in the first place. I get it can be tedious, but it’s important to get to the bottom of these issues!
It sounds like you hit a frustrating issue there! LSA protection can be a real pain when it comes to scheduled tasks. I've had similar issues before, and your solution to remove the registry key and reboot is one I consider when troubleshooting. But be cautious about disabling security features, as it can lead to vulnerabilities. Have you thought about just updating the service account permissions instead?
Yeah, I agree! Sometimes fixing the root cause of the issue is better than just applying a quick fix.
I appreciate your concern, but I was just sharing what worked for me in this case. It wasn't ideal, but sometimes you just have to get things running.