The credentials test and scheduling agent installations fails while the remote installation succeeds (4223445)

Consider the following case...

1. User credentials are provided on the Change Auditor Deployment tab for an account that has Domain Admin rights.
2. Using this account, Change Auditor Agents are able to be deployed to servers and Domain Controllers in the environment is the "deploy now" option is used.
3. If the "Credential | Test" option is selected, or the "deploy later" option is chosen, there is a failure:

"Logon Failure: The user has not been granted the requested logon type at this computer (1385)"

The user account in question does not have permission to "Log on as a batch job" on the coordinator server.  By default the BUILTIN\Administrators group and BUILTIN\Backup Operators group have this permission.

This can be viewed under the Local Security Policy | Security Settings | Local Policies | User Rights Assignment | Log on as a batch job.

Workaround 1:

Continue to "deploy now" rather than choosing to "deploy later".

Workaround 2:

Use a different account that has the permission to Log on as a batch job.

Resolution:

Grant this user account the "Log on as a batch job" permission. This setting needs to be configured on the Coordinator server.