"log on as a batch job" user rights removed by what GPO?
Solution 1:
The "Resultant Set of Policy" tool will help you out here; it's at the bottom of the left sidebar in Group Policy Management Console.
Point it at the machine, then on the settings tab, you'll find each item set by policies applied to the system, and which GPO that setting came from.