Service Log On Account Problem

Service Log On Account Problem

Secure Home | Search | About

Microsoft Applications Security - Microsoft's general security discussions and announcements 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Service Log On Account Problem Pawel 09-19-2005
Posted by =?Utf-8?B?UGF3ZWw=?= on September 19, 2005, 9:41 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello. My problem concerns Windows Services. I want some of my services work
with permissions of domain user or domain admin (not Local System account).
Everything works OK till reboot server. After this services don't start
automatically due to incorect password reason. I have to type password
manualy and start service manualy. This domain account are local admins of
server and are added in Local Security Settings\User Rights Assignment\Logon
as a service. What is the reason of my problem? Thanks in advance.
Pawel

Posted by Lanwench [MVP - Exchange] on September 20, 2005, 12:08 am
If you were  Registered and logged in, you could reply and use other advanced thread options


> Hello. My problem concerns Windows Services. I want some of my
> services work with permissions of domain user or domain admin (not
> Local System account). Everything works OK till reboot server. After
> this services don't start automatically due to incorect password
> reason. I have to type password manualy and start service manualy.
> This domain account are local admins of server and are added in Local
> Security Settings\User Rights Assignment\Logon as a service. What is
> the reason of my problem? Thanks in advance.
> Pawel

What happens if you manually start the service - does it work absolutely
fine if you don't type the password?

Event logs give you any clues?



Posted by =?Utf-8?B?UGF3ZWw=?= on September 22, 2005, 3:38 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello again. The solution is quite simple. It is not good idea to give
permission in Local Security Policy on the server (Local Security
Settings\User Rights Assignment\Logon as a service) for domain account. I
moved this policy to AD root level. But it is very important to put this
policy in the Default Domain Policy not in some other or new policy. I had it
in different policy and it didn't work. When I moved this policy do
Default... everything starting work fine.
Thanks for your help. Pawel

"Pawel" wrote:

> Hello. My problem concerns Windows Services. I want some of my services work
> with permissions of domain user or domain admin (not Local System account).
> Everything works OK till reboot server. After this services don't start
> automatically due to incorect password reason. I have to type password
> manualy and start service manualy. This domain account are local admins of
> server and are added in Local Security Settings\User Rights Assignment\Logon
> as a service. What is the reason of my problem? Thanks in advance.
> Pawel

Similar ThreadsPosted
Service Account Certficates June 16, 2005, 4:37 pm
How do I create a service account? August 6, 2007, 5:20 pm
Service Account modified January 20, 2009, 8:14 am
NTRights & SQL Service Account Security November 4, 2008, 10:04 am
Service Pack 2 problem October 25, 2006, 6:00 pm
Messenger Service problem! January 2, 2008, 3:18 pm
Running MSI from a NT service problem September 17, 2008, 9:49 am
maximum services service account can start April 27, 2006, 4:09 pm
Creating a very limited user account to run a service September 6, 2006, 11:04 am
Service Accounts & Account Lock out Policy February 15, 2007, 3:41 am

The site map in XML format XML site map

Contact Us | Privacy Policy