This SAS Note contains important information for federal agencies that are using the Windows XP, Windows Vista, or Windows 7 operating system. You need to be aware that installing Platform Computing's Platform LSF Scheduler version 7.06 enables the user rights policies "Log on as a batch job" and "Impersonate a client after authentication."

These policy changes are not allowed by the Federal Desktop Core Configuration (FDCC) or the United States Government Configuration Baseline (USGCB) guidelines.

In order to be compliant with the FDCC and USGCB guidelines, federal system administrators need to reset these policies on the client users' machines after the installation has completed.

To update the Local Security Policies, follow these steps:

1. Click Start ► Run and type secpol.msc. The Local Security Policy window appears.
2. In the Local Security Policy window, open the Local Policies folder and then open the User Rights Assignment folder.
3. On the right side of the window, scroll down to Log on as a batch job and double-click that icon. The Log on As a Batch Job Properties dialog box appears.
4. Select Everyone and click Remove, Apply, and OK.
5. On the right side of the window, scroll down to Impersonate a Client After Authentication and double-click to open the dialog box.
6. Select Everyone and click Remove, Apply, and OK.

These policies are no longer needed for the Platform LSF. This problem is scheduled to be corrected in a future release of Platform LSF.

Operating System and Release Information