We are getting an error when a subset of users submit jobs to one of our three Remote Publish Engines.
"Error occurred while calling gtgroupjobexecutor.exe
Exception message: Logon failure: the user has not been granted the requested logon type on this computer"
We have AD integration configured and the user is in the correct group. The user can publish to the other two remote publish servers which appear to be configured the same way. I must be overlooking something, because this is the only system of three that is misbehaving.
- The ID configured for the remote publish service has "logon as a service" rights.
- The users who are unable to publish do not have RDP access on any of the three systems, but they are only failing on this one.
- The group job executor is properly configured. When I click verify, I get the correct version information for the service layer.
- Users with RDP access are having no problems publishing to any of the three servers.
We expect the user that is trying to do the remote publish on the server does not have login rights to the server. Even though the remote publish is running as a service, the service will shell out the publish under the user name, and the user will need to have access to login locally to the server.
Below is a link to a tech document from Microsoft on granting the user rights to log in locally to the server to allow the remote publish: