How to have the worker service run as a particular user on Windows. This may be necessary if you want to use a centralized directory for the job logs, but you have a domain policy in place that prohibits granting 'Everyone - Full Control' to any shares on your network.
First, configure the service to log on as a particular user; refer to various Windows administration guides/Google for instructions on how to accomplish this.
Add this user to the local Administrator's group, and the following User Rights Assigments policies must be applied to both the Administrator's and Network Service groups:
replace a process-level token
act as part of the operating system
adjust memory quota for process