Modifying jobmon service rights for Windows™

On Windows™ systems, the IBM Workload Scheduler jobmon service runs in the SYSTEM account with the right Allow Service to Interact with Desktop granted to it. You can remove this right for security reasons. However, if you do so, it prevents the service from launching interactive jobs that run in a window on the user's desktop. These jobs will be run, but are not accessible from the desktop or from IBM Workload Scheduler and do not have access to desktop resources. As a result, they may run forever or abend due to lack of resources.