A job fails to execute on Control-M/Agent with error "CreateProcessAsUser failed  with error: 1314 - A required privilege is not held by the client"

Version 3
    Share:|

    This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.


    PRODUCT:

    Control-M/Agent for UNIX and Microsoft Windows


    COMPONENT:

    Control-M/Agent for UNIX and Microsoft Windows


    APPLIES TO:

    Control-M/Agent for UNIX and Microsoft Windows; all versions



    PROBLEM:

     

    When running a job with Control-M/Agent, it might end NOTOK or fails to submit, reporting the error "CreateProcessAsUser failed  with error: 1314 - A required privilege is not held by the client" either in the job log or the Agent proclog AM log.

     


    CAUSE:

    Missing Windows privilege(s)


    SOLUTION:

     

    1) If Logon as User is set to Y, the "Run As" job owner user needs to have the Windows "Replace a process level token" permission set.

      
         a) Open the Control Panel -> Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment 
      
         b) Add the Run As job owner user account to the "Replace a process level token" Policy.  
       NOTE:  You may have to logout or even reboot to have this change take effect. 
      
     
    2) For the Control-M/Agent Windows service if "This Account " is selected (I.e. not using "Local system account") in the Logon tab then this Windows user must be member of the local admin group and have the following rights: 
      
        
      
         a) Control Panel -> Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment: 
      
             Adjust memory quotas for a process 
      
             Replace a process level token 
      
             Log on as a service  
           Log on as batch job 
      
         b) The Directory and Sub-directories where Control-M/Agent are installed need to have "List Folder Contents" permissions in the "Security" tab of the Properties of the directory. 

     


    Article Number:

    000079613


    Article Type:

    Solutions to a Product Problem



      Looking for additional information?    Search BMC Support  or  Browse Knowledge Articles