The thing I find the most difficult in the whole of IT (#87 in an ongoing series)

Remembering this

Control Panel, Administrative Tools, and then Local Security Policy. In the Local Security Policy window, click Local Policy, User Rights Assignment, and then Logon as batch job.