Southsoftware.com
   

Fix “A required privilege is not held by the client (1314)” error

If you use the "Start this task under the following user account" option on the "User Account Options" tab of the "Task Properties" window, you may get "A required privilege is not held by the client (1314)" error with the following output in the "Execution Log":

AdjustPrivilege SE_TCB_NAME error 1300 in runastoken.cpp, 497
AdjustPrivilege SE_ASSIGNPRIMARYTOKEN_NAME error 1300 in runastoken.cpp, 501
AdjustPrivilege SE_INCREASE_QUOTA_NAME error 1300 in runastoken.cpp, 505
AdjustPrivilege SE_DEBUG_NAME error 1300 in runastoken.cpp, 513
LoadUserProfile error 1314 in runasprofiles.cpp, 267
LoadProfile error 1314 in runastoken.cpp, 120

CreateProcess error 1314 in cmdexecute.cpp, 1390

This error means that the user account under which Advanced Task Scheduler is running does not have the listed privileges enabled.

Note: That it's not the user which you selected in the "Start this task under the following user account" option. That's the user account under which Advanced Task Scheduler is running.

How to fix the issue:

  • If you run your task on the current user's tab:

    • Consider running your task on the "All Users" tab. If not configured otherwise, "All Users" tasks run on behalf of Local System. Local System is a system account, which has these privileges enabled by default.
    • The privileges must be enabled for the current user (name is displayed on the tab). Also you should start Advanced Task Scheduler as administrator (right-click its icon and select the "Run As Administrator" command).
  • If you run your task on the "All Users" tab:

    • Go to "Control Panel" | "Administrative Tools" | "Services", double click "Advanced Task Scheduler Service". The "Log On" tab of the "Service Properties window" will display the user account under which Advanced Task Scheduler Service is running. You need to enable required privileges to that account.

How to enable privileges in Windows:

You can modify user privileges in "Control Panel" | "Administrative tools" | "Local Security Policy" | "User Rights Assignment".

Privilege names for your reference:

SE_TCB_NAME SeTcbPrivilege "Act as part of the operating system"
SE_ASSIGNPRIMARYTOKEN_NAME SeAssignPrimaryTokenPrivilege "Replace a process-level token"
SE_INCREASE_QUOTA_NAME SeIncreaseQuotaPrivilege "Adjust memory quotas for a process" (may be named "Increase memory quotas" or "Increate quotas" in Windows 2000 and NT 4.0)
SE_CHANGE_NOTIFY_NAME SeChangeNotifyPrivilege "Bypass traverse checking"
SE_DEBUG_NAME SeDebugPrivilege "Debug programs"
SE_CREATE_TOKEN_NAME SeCreateTokenPrivilege "Create a token object" (only used for passwordless user authorization

Note: Windows XP Home and Windows Vista Home do not contain secpol.msc snapin, which provides User Rights Assignment section to the Control Panel, so if that is your case, you need some third-party tool to modify your account privileges. You can download our Polsedit tool from https://www.southsoftware.com/. It will let you modify your account privileges and it is completely free to use.

References
User Account Options

Categories: Task scheduler

Leave a Reply

   
About us   Cookie policy   Privacy policy   Terms of use   Link to us