The following error may be seen when trying to run a Job on the Scheduler or Agent if either the Executor Service or the JAMS Agent Service are running as a domain account:
Unable to load user profile: A required privilege is not held by the client.
If needing to change the accounts Services are running under, please see the KB Article Here.
Note: It is not advised to run the JAMS Executor or JAMS Agent services as a domain account. These services do not require a connection to the JAMS database and also do not require a connection to the network, and they DO require permissions held by LocalSystem.
In addition to the list of Local Security policies needed for the domain account, the following policies are required:
- Act as a part of the operating system
- Create token object
- Be a member of the Local Administrators Group on the Scheduler or Agent machines