Deny Log on as a Batch job Security Setting
Ensure ‘Deny log on as a batch job’ to include ‘Guests’ policy setting determines the accounts that are restricted from logging onto the computer to execute batch jobs. A batch job here refers to a batch-queue facility, not a simple batch (.bat) file. Accounts utilizing the Task Scheduler for scheduling tasks require this user privilege.