1

Closed

Add support for batch job rights in ServiceCredDlg

description

I would like to use ServiceCredDlg to get the credentials that will be used to create a scheduled task. The identity requires the Log on as a batch job right. This dialog unfortunately is restricted to be used for only service accounts.

It would be great if there was a property that could control the permissions/right verification process. Something like:

CREDENTIAL_PURPOSE = SERVICE|BATCHJOB|GENERAL

SERVICE would run the Run as a service right check as it does currently
BATCHJOB would check that the identity has the Run as a batch job right
GENERAL would not run any right checks. This will be useful where the installer needs to verify a windows identity, but it is not used for either a service or batch job identity.
Closed Jun 28, 2011 at 1:52 AM by
This is already supported by the CheckPriviege CA.
http://code.dblock.org/Source/msiext/1.2/Docs/_check_privilege_8h.html#abcd8ef7f12359b671c69a8d9f19f2dbf

Clone the service dialog for your purposes and specify the appropriate LOGON_PRIVILEGE (SeBatchLogonRight).

comments