I've asked this question in the Group Policy forum, but was asked to post here. Hopefully an answer to this can be found.
I'm attempting to find the state of the Logon as Batch group policy setting via script, specficially Powershell's Get-WMIObject cmdlet. The closest class that I have found so far with settings contained in the User Rights Assignment is RSOP_UserPrivilegeRight in the "root\RSOP\Computer" namespace. Unfortunately, the only option containing any reference to batch jobs is the SeDenyBatchLogonRight constant. So I can find where to block the right, but not where to grant it.
PS C:\WINDOWS\system32> Get-WmiObject RSOP_UserPrivilegeRight -namespace "root\RSOP\Computer" | ? {$_.UserRight -match "Batch"}
SeDenyBatchLogonRight
I know of the NTRIGHTS.EXE utility, but this does not give me the option to simply query a computer and find the state of the Logon As Batch Job policy. That is what I'm after. If anyone could provide some assistance as to the location of where this value is stored, it would be greatly appreciated.