From the Windows 2000 desktop, perform the following steps:
1. Click on START => Programs => Administrative Tools => Local Security Policy

2. Drill-down on the Local Policies folder

3. Highlight and Select the User Rights Assignment folder

4. Look at the right side of the window and scroll down the list until "Deny 
   Logon as Batch Job" privilege is displayed. 

5. To select the privilege, either select Action from the menu bar then 
   Security or right-click on the "Deny Logon as a Batch Job" privilege then 
   Security or just double-click on the privilege.

6. The list of users who are assigned this privilege will display in the box.
   Locate and highlight the Windows 2000 user who is specified in the 
   Enterprise Manager Console's Preferred Credentials setting for that node.

7. Locate the check box to the right of the User's name entitled: Local Policy 
   Setting.  De-select the box by clicking once inside the box.  This will 
   remove the user from the assigned users list.

8. Click on OK to save the changes.