Modifying jobmon service rights for Windows

On Windows systems, the HCL Workload Automation jobmon service runs in the SYSTEM account with the right Allow Service to Interact with Desktop granted to it. You can remove this right for security reasons. However, if you do so, it prevents the service from launching interactive jobs that run in a window on the user's desktop. These jobs will be run, but are not accessible from the desktop or from HCL Workload Automation and do not have access to desktop resources. As a result, they may run forever or abend due to lack of resources.