ePO requires local and domain admins to be granted Log on as a batch job user right.

In addition, the following UAC settings need to be applied to the ePO server:

• User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode - Elevate without prompting.
• User Account Control: Run all administrators in Admin Approval Mode - Disabled

The above UAC settings can be adjusted and set by applying an updated Group Policy Object. For the new settings to be applied, a system reboot is needed after you change the UAC settings.

NOTE: The settings can be found in the Group Policy Management Console. They're located under Computer Configuration, Policies, Windows Settings, Security Settings, Local Policies, and Security Options.

For additional information about the UAC settings, see the following Microsoft articles:

• User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode.
• User Account Control: Run all administrators in Admin Approval Mode.