TFS 2015.2 Configuration – Verification check fails with IIS_IUSRS group requiring ‘log on a batch’ permission.

Recently we have seen a few incidents, where the configuration of TFS 2015.2 fails at readiness check with the message,

The readiness check fails due to the reason that the built-in security group IIS_IUSRS does not have the required user right ‘Logon as a batch job’. This requirement check was added to TFS 2015.2 after several reported problems with TFS web site when this permission was missing.

To resolve this, go ahead and grant the specified permission to the group IIS_IUSRS.

1. Navigate to the local security policy [Control Panel> Administrative Tools> Local Security Policy.]
2. Add the IIS_IUSRS group to log on as a batch job under Windows user right assignment, [Security Settings/Local Policies/User Rights Assignments].



Hope this helps!

Content: Sinduja Karruppiah
Review: Vimal Thiagaraj





Comments (3)

  1. Chaim Eliyah says:

    Has this been resolved in Update 3?

    1. Hi,

      This is a requirement from TFS 2015.2 + and not a bug. The permission needs to be present/added.

      1. Chaim Eliyah says:

        Great, thanks!

Skip to main content