Services Fail with Error Logon failure: the user has not been granted the requested logon type at this computer.

I'm getting this error on a few services every 3 weeks or so. Normally
after a windows update and a restart.

The Environment is a Windows SBS 2003 with SP2, I can reset the Passwords
in the services and it then works fine not really a permenant fix and is
beginning to be annoying.
The services all use different accounts, One is the Domain admin account.
I have checked the Group Policy and the accounts all have logon as a service
right.
Has anyone come accross this before?

Hello Zaz,

Some services need more user rights assigment options then only "logon as
a service". I assume there is some additional missing for that specific service.

Also you should never use an admin account for services, use domain user
accounts or on member servers local user accounts which only havt he needed
permissions to start the service. This depends on the service/applications/role
which is used.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I'm getting this error on a few services every 3 weeks or so.
> Normally after a windows update and a restart.
>
> The Environment is a Windows SBS 2003 with SP2, I can reset the
> Passwords
> in the services and it then works fine not really a permenant fix and
> is
> beginning to be annoying.
> The services all use different accounts, One is the Domain admin
> account.
> I have checked the Group Policy and the accounts all have logon as a
> service
> right.
> Has anyone come accross this before?

I appriciate the non use of the Admin account in services, what other
rights and how would i set them?


"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d92308cc2cf34f398a2d@msnews.microsoft.com...
> Hello Zaz,
>
> Some services need more user rights assigment options then only "logon as
> a service". I assume there is some additional missing for that specific
> service.
>
> Also you should never use an admin account for services, use domain user
> accounts or on member servers local user accounts which only havt he
> needed permissions to start the service. This depends on the
> service/applications/role which is used.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I'm getting this error on a few services every 3 weeks or so.
>> Normally after a windows update and a restart.
>>
>> The Environment is a Windows SBS 2003 with SP2, I can reset the
>> Passwords
>> in the services and it then works fine not really a permenant fix and
>> is
>> beginning to be annoying.
>> The services all use different accounts, One is the Domain admin
>> account.
>> I have checked the Group Policy and the accounts all have logon as a
>> service
>> right.
>> Has anyone come accross this before?
>
>

Hello Zaz,

This depends on the application/service/role as said before. Some will list
during installation the needed permissions. Check the event viewer if something
is listed. Also a way to figure it out can be to create a scheduled task
to start the service with the problem account. Very often in the scheduled
task eventlog is listed which permissions are missing or you find more detailed
error description.

Configuration has to be set either in local or with GPMC in the OU where
the machine belongs to:
Computer configuration, windows settings, security settings, local policies,
User rights assignment, in the right pane you see the list of options.


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I appriciate the non use of the Admin account in services, what other
> rights and how would i set them?
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911d92308cc2cf34f398a2d@msnews.microsoft.com...
>
>> Hello Zaz,
>>
>> Some services need more user rights assigment options then only
>> "logon as a service". I assume there is some additional missing for
>> that specific service.
>>
>> Also you should never use an admin account for services, use domain
>> user accounts or on member servers local user accounts which only
>> havt he needed permissions to start the service. This depends on the
>> service/applications/role which is used.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I'm getting this error on a few services every 3 weeks or so.
>>> Normally after a windows update and a restart.
>>>
>>> The Environment is a Windows SBS 2003 with SP2, I can reset the
>>> Passwords
>>> in the services and it then works fine not really a permenant fix
>>> and
>>> is
>>> beginning to be annoying.
>>> The services all use different accounts, One is the Domain admin
>>> account.
>>> I have checked the Group Policy and the accounts all have logon as a
>>> service
>>> right.
>>> Has anyone come accross this before?

Just so you are aware the apps are Backup exec and BES, I have installed
both of these before and have never had to do any other user rights
assignments. I will try the scheduled task idea and see what happens.
however as it doesn't happen for 3weeks or so I will have to wait,.

regards

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d92388cc2cf6a60c8586@msnews.microsoft.com...
> Hello Zaz,
>
> This depends on the application/service/role as said before. Some will
> list during installation the needed permissions. Check the event viewer if
> something is listed. Also a way to figure it out can be to create a
> scheduled task to start the service with the problem account. Very often
> in the scheduled task eventlog is listed which permissions are missing or
> you find more detailed error description.
>
> Configuration has to be set either in local or with GPMC in the OU where
> the machine belongs to:
> Computer configuration, windows settings, security settings, local
> policies, User rights assignment, in the right pane you see the list of
> options.
>
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I appriciate the non use of the Admin account in services, what other
>> rights and how would i set them?
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:6cb2911d92308cc2cf34f398a2d@msnews.microsoft.com...
>>
>>> Hello Zaz,
>>>
>>> Some services need more user rights assigment options then only
>>> "logon as a service". I assume there is some additional missing for
>>> that specific service.
>>>
>>> Also you should never use an admin account for services, use domain
>>> user accounts or on member servers local user accounts which only
>>> havt he needed permissions to start the service. This depends on the
>>> service/applications/role which is used.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> I'm getting this error on a few services every 3 weeks or so.
>>>> Normally after a windows update and a restart.
>>>>
>>>> The Environment is a Windows SBS 2003 with SP2, I can reset the
>>>> Passwords
>>>> in the services and it then works fine not really a permenant fix
>>>> and
>>>> is
>>>> beginning to be annoying.
>>>> The services all use different accounts, One is the Domain admin
>>>> account.
>>>> I have checked the Group Policy and the accounts all have logon as a
>>>> service
>>>> right.
>>>> Has anyone come accross this before?
>
>

Hello Zaz,

BackupExec for example show during setup that the used account will get some
additional permissons. If the used account is the default administrator it
will not really be viewable because the administrator is often added by default
to the needed ones. But if another account is used check the local policy
on the machine and if it is on a DC(not the best solution for BackupExec)
the default domain controllers policy.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Just so you are aware the apps are Backup exec and BES, I have
> installed both of these before and have never had to do any other user
> rights assignments. I will try the scheduled task idea and see what
> happens. however as it doesn't happen for 3weeks or so I will have to
> wait,.
>
> regards
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911d92388cc2cf6a60c8586@msnews.microsoft.com...
>
>> Hello Zaz,
>>
>> This depends on the application/service/role as said before. Some
>> will list during installation the needed permissions. Check the event
>> viewer if something is listed. Also a way to figure it out can be to
>> create a scheduled task to start the service with the problem
>> account. Very often in the scheduled task eventlog is listed which
>> permissions are missing or you find more detailed error description.
>>
>> Configuration has to be set either in local or with GPMC in the OU
>> where
>> the machine belongs to:
>> Computer configuration, windows settings, security settings, local
>> policies, User rights assignment, in the right pane you see the list
>> of
>> options.
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I appriciate the non use of the Admin account in services, what
>>> other rights and how would i set them?
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:6cb2911d92308cc2cf34f398a2d@msnews.microsoft.com...
>>>
>>>> Hello Zaz,
>>>>
>>>> Some services need more user rights assigment options then only
>>>> "logon as a service". I assume there is some additional missing for
>>>> that specific service.
>>>>
>>>> Also you should never use an admin account for services, use domain
>>>> user accounts or on member servers local user accounts which only
>>>> havt he needed permissions to start the service. This depends on
>>>> the service/applications/role which is used.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> I'm getting this error on a few services every 3 weeks or so.
>>>>> Normally after a windows update and a restart.
>>>>>
>>>>> The Environment is a Windows SBS 2003 with SP2, I can reset the
>>>>> Passwords
>>>>> in the services and it then works fine not really a permenant fix
>>>>> and
>>>>> is
>>>>> beginning to be annoying.
>>>>> The services all use different accounts, One is the Domain admin
>>>>> account.
>>>>> I have checked the Group Policy and the accounts all have logon as
>>>>> a
>>>>> service
>>>>> right.
>>>>> Has anyone come accross this before?