Service Log On Account Problem

Service Log On Account Problem

Secure Home | Search | About

Microsoft Applications Security - Microsoft's general security discussions and announcements 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Service Log On Account Problem Pawel 09-19-2005
Posted by =?Utf-8?B?UGF3ZWw=?= on September 19, 2005, 9:41 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello. My problem concerns Windows Services. I want some of my services work
with permissions of domain user or domain admin (not Local System account).
Everything works OK till reboot server. After this services don't start
automatically due to incorect password reason. I have to type password
manualy and start service manualy. This domain account are local admins of
server and are added in Local Security Settings\User Rights Assignment\Logon
as a service. What is the reason of my problem? Thanks in advance.
Pawel

Posted by Lanwench [MVP - Exchange] on September 20, 2005, 12:08 am
If you were  Registered and logged in, you could reply and use other advanced thread options


> Hello. My problem concerns Windows Services. I want some of my
> services work with permissions of domain user or domain admin (not
> Local System account). Everything works OK till reboot server. After
> this services don't start automatically due to incorect password
> reason. I have to type password manualy and start service manualy.
> This domain account are local admins of server and are added in Local
> Security Settings\User Rights Assignment\Logon as a service. What is
> the reason of my problem? Thanks in advance.
> Pawel

What happens if you manually start the service - does it work absolutely
fine if you don't type the password?

Event logs give you any clues?



Posted by =?Utf-8?B?UGF3ZWw=?= on September 20, 2005, 2:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options
No, if I don't type the password services don't start manually. But there is
something strange because is enough type password for only one service and
then this and all others services I can start manually without typing
password and they are working absolutely fine. This problem concerns Windows
Server 2003 as well as 2000 and even XP Pro in my domain. In the event log I
get this message:
<<Logon attempt with current password failed with the following error:
Logon failure: the user has not been granted the requested logon type at
this computer.>>
Pawel

"Lanwench [MVP - Exchange]" wrote:

>
>
> > Hello. My problem concerns Windows Services. I want some of my
> > services work with permissions of domain user or domain admin (not
> > Local System account). Everything works OK till reboot server. After
> > this services don't start automatically due to incorect password
> > reason. I have to type password manualy and start service manualy.
> > This domain account are local admins of server and are added in Local
> > Security Settings\User Rights Assignment\Logon as a service. What is
> > the reason of my problem? Thanks in advance.
> > Pawel
>
> What happens if you manually start the service - does it work absolutely
> fine if you don't type the password?
>
> Event logs give you any clues?
>
>
>

Posted by =?Utf-8?B?SVdTRUM=?= on September 21, 2005, 6:20 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,
It's probably to do with your local security settings. In your Local
Security Policy, User Rights Assigment section you need to give the account
you want to use to run services the 'Log on as a service' right.

Hopefully this will help,

Cheers
IWSEC
www.iwsec.co.uk


"Pawel" wrote:

> No, if I don't type the password services don't start manually. But there is
> something strange because is enough type password for only one service and
> then this and all others services I can start manually without typing
> password and they are working absolutely fine. This problem concerns Windows
> Server 2003 as well as 2000 and even XP Pro in my domain. In the event log I
> get this message:
> <<Logon attempt with current password failed with the following error:
> Logon failure: the user has not been granted the requested logon type at
> this computer.>>
> Pawel
>
> "Lanwench [MVP - Exchange]" wrote:
>
> >
> >
> > > Hello. My problem concerns Windows Services. I want some of my
> > > services work with permissions of domain user or domain admin (not
> > > Local System account). Everything works OK till reboot server. After
> > > this services don't start automatically due to incorect password
> > > reason. I have to type password manualy and start service manualy.
> > > This domain account are local admins of server and are added in Local
> > > Security Settings\User Rights Assignment\Logon as a service. What is
> > > the reason of my problem? Thanks in advance.
> > > Pawel
> >
> > What happens if you manually start the service - does it work absolutely
> > fine if you don't type the password?
> >
> > Event logs give you any clues?
> >
> >
> > www.iwsec.co.uk/oscommerce.htm

Posted by =?Utf-8?B?UGF3ZWw=?= on September 22, 2005, 3:38 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello again. The solution is quite simple. It is not good idea to give
permission in Local Security Policy on the server (Local Security
Settings\User Rights Assignment\Logon as a service) for domain account. I
moved this policy to AD root level. But it is very important to put this
policy in the Default Domain Policy not in some other or new policy. I had it
in different policy and it didn't work. When I moved this policy do
Default... everything starting work fine.
Thanks for your help. Pawel

"Pawel" wrote:

> Hello. My problem concerns Windows Services. I want some of my services work
> with permissions of domain user or domain admin (not Local System account).
> Everything works OK till reboot server. After this services don't start
> automatically due to incorect password reason. I have to type password
> manualy and start service manualy. This domain account are local admins of
> server and are added in Local Security Settings\User Rights Assignment\Logon
> as a service. What is the reason of my problem? Thanks in advance.
> Pawel

Similar ThreadsPosted
Service Account Certficates June 16, 2005, 4:37 pm
How do I create a service account? August 6, 2007, 5:20 pm
Service Account modified January 20, 2009, 8:14 am
Service Pack 2 problem October 25, 2006, 6:00 pm
Messenger Service problem! January 2, 2008, 3:18 pm
Running MSI from a NT service problem September 17, 2008, 9:49 am
NTRights & SQL Service Account Security November 4, 2008, 10:04 am
Local System x Service Account May 11, 2005, 10:00 am
maximum services service account can start April 27, 2006, 4:09 pm
Creating a very limited user account to run a service September 6, 2006, 11:04 am

The site map in XML format XML site map

Contact Us | Privacy Policy