When a task that uses impersonation contains a Run External Program step that runs a batch file it may fail at runtime with the following error:
0x80070522 “A required privilege is not held by the client”
Occurs where the impersonating account does not have sufficient rights to logon as a batch job.
Change the group policy to allow the impersonating account to logon as a batch job.
- Start > Run and type gpedit.msc to open the Group Policy Editor.
- Within the Group Policy Editor choose Computer Configuration > Windows Settings > Local Policies > User Rights Assignment.
- In the list of policies select Logon as a batch job and add the impersonating account user.