8.3.1 Granting the Logon Privilege (Windows only)
To allow a user to be able to login and validate security using the Windows security system, any users who will be logging in must be granted the Logon as a batch job privilege. This is required for both SECLEVEL 1 and 2.
This is done in the Control Panel, Administrative Tools, Local Security Policy. In the Security Settings tree, expand Local Policies and highlight User Rights Assignment. In the right hand pane, double-click on Logon as a batch job. In this dialog you can then add user(s) or group(s) which you wish to have the privilege of logging in.
If you have enabled SECLEVEL 1, this is all that must be performed. If you have enabled SECLEVEL 2, continue on to the next section.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*