Hello. My problem concerns Windows Services. I want some of my services work
with permissions of domain user or domain admin (not Local System account).
Everything works OK till reboot server. After this services don't start
automatically due to incorect password reason. I have to type password
manualy and start service manualy. This domain account are local admins of
server and are added in Local Security Settings\User Rights Assignment\Logon
as a service. What is the reason of my problem? Thanks in advance.
Pawel

Re: Service Log On Account Problem by Lanwench

Lanwench
Mon Sep 19 23:08:12 CDT 2005



In news:BD3DB6FA-D6B8-4211-8AE6-CDA6673E0466@microsoft.com,
Pawel <Pawel@discussions.microsoft.com> typed:
> Hello. My problem concerns Windows Services. I want some of my
> services work with permissions of domain user or domain admin (not
> Local System account). Everything works OK till reboot server. After
> this services don't start automatically due to incorect password
> reason. I have to type password manualy and start service manualy.
> This domain account are local admins of server and are added in Local
> Security Settings\User Rights Assignment\Logon as a service. What is
> the reason of my problem? Thanks in advance.
> Pawel

What happens if you manually start the service - does it work absolutely
fine if you don't type the password?

Event logs give you any clues?



Re: Service Log On Account Problem by Pawel

Pawel
Tue Sep 20 01:11:01 CDT 2005

No, if I don't type the password services don't start manually. But there is
something strange because is enough type password for only one service and
then this and all others services I can start manually without typing
password and they are working absolutely fine. This problem concerns Windows
Server 2003 as well as 2000 and even XP Pro in my domain. In the event log I
get this message:
<<Logon attempt with current password failed with the following error:
Logon failure: the user has not been granted the requested logon type at
this computer.>>
Pawel

"Lanwench [MVP - Exchange]" wrote:

>
>
> In news:BD3DB6FA-D6B8-4211-8AE6-CDA6673E0466@microsoft.com,
> Pawel <Pawel@discussions.microsoft.com> typed:
> > Hello. My problem concerns Windows Services. I want some of my
> > services work with permissions of domain user or domain admin (not
> > Local System account). Everything works OK till reboot server. After
> > this services don't start automatically due to incorect password
> > reason. I have to type password manualy and start service manualy.
> > This domain account are local admins of server and are added in Local
> > Security Settings\User Rights Assignment\Logon as a service. What is
> > the reason of my problem? Thanks in advance.
> > Pawel
>
> What happens if you manually start the service - does it work absolutely
> fine if you don't type the password?
>
> Event logs give you any clues?
>
>
>

Re: Service Log On Account Problem by IWSEC

IWSEC
Wed Sep 21 05:20:02 CDT 2005

Hi,
It's probably to do with your local security settings. In your Local
Security Policy, User Rights Assigment section you need to give the account
you want to use to run services the 'Log on as a service' right.

Hopefully this will help,

Cheers
IWSEC
www.iwsec.co.uk


"Pawel" wrote:

> No, if I don't type the password services don't start manually. But there is
> something strange because is enough type password for only one service and
> then this and all others services I can start manually without typing
> password and they are working absolutely fine. This problem concerns Windows
> Server 2003 as well as 2000 and even XP Pro in my domain. In the event log I
> get this message:
> <<Logon attempt with current password failed with the following error:
> Logon failure: the user has not been granted the requested logon type at
> this computer.>>
> Pawel
>
> "Lanwench [MVP - Exchange]" wrote:
>
> >
> >
> > In news:BD3DB6FA-D6B8-4211-8AE6-CDA6673E0466@microsoft.com,
> > Pawel <Pawel@discussions.microsoft.com> typed:
> > > Hello. My problem concerns Windows Services. I want some of my
> > > services work with permissions of domain user or domain admin (not
> > > Local System account). Everything works OK till reboot server. After
> > > this services don't start automatically due to incorect password
> > > reason. I have to type password manualy and start service manualy.
> > > This domain account are local admins of server and are added in Local
> > > Security Settings\User Rights Assignment\Logon as a service. What is
> > > the reason of my problem? Thanks in advance.
> > > Pawel
> >
> > What happens if you manually start the service - does it work absolutely
> > fine if you don't type the password?
> >
> > Event logs give you any clues?
> >
> >
> > www.iwsec.co.uk/oscommerce.htm

I found solution for my problem by Pawel

Pawel
Thu Sep 22 02:38:08 CDT 2005

Hello again. The solution is quite simple. It is not good idea to give
permission in Local Security Policy on the server (Local Security
Settings\User Rights Assignment\Logon as a service) for domain account. I
moved this policy to AD root level. But it is very important to put this
policy in the Default Domain Policy not in some other or new policy. I had it
in different policy and it didn't work. When I moved this policy do
Default... everything starting work fine.
Thanks for your help. Pawel

"Pawel" wrote:

> Hello. My problem concerns Windows Services. I want some of my services work
> with permissions of domain user or domain admin (not Local System account).
> Everything works OK till reboot server. After this services don't start
> automatically due to incorect password reason. I have to type password
> manualy and start service manualy. This domain account are local admins of
> server and are added in Local Security Settings\User Rights Assignment\Logon
> as a service. What is the reason of my problem? Thanks in advance.
> Pawel