Royal Server needs a valid Worker Account with the following properties to work:
- it is able to log on (e.g. you don't need to change the password at next logon because of a policy)
- it is in the local administrators group and
- it has the right to log on as a batch job(which is new to V4). If the user is local administrator it includes the logon type as batch by default. You can check if this account has the permission in the Group Policy Editor (gpedit.msc) under: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment under "Log on as batch job". This right is typically included in the membership of the local Administrators group but might be changed by a domain group policy.
additionally, if domain users or domain groups are used, the worker account must be a domain user, in order to be allowed to query the domain controller