Services Fail with Error Logon failure: the user has not been granted the requested logon type at this computer.

[Zaz]

I'm getting this error on a few services every 3 weeks or so. Normally
after a windows update and a restart.

The Environment is a Windows SBS 2003 with SP2, I can reset the Passwords
in the services and it then works fine not really a permenant fix and is
beginning to be annoying.
The services all use different accounts, One is the Domain admin account.
I have checked the Group Policy and the accounts all have logon as a service
right.
Has anyone come accross this before?

[Meinolf Weber [MVP-DS]]

Hello Zaz,

Some services need more user rights assigment options then only "logon as
a service". I assume there is some additional missing for that specific service.

Also you should never use an admin account for services, use domain user
accounts or on member servers local user accounts which only havt he needed
permissions to start the service. This depends on the service/applications/role
which is used.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

[Zaz]

I appriciate the non use of the Admin account in services, what other
rights and how would i set them?

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d92308...@msnews.microsoft.com...

[Meinolf Weber [MVP-DS]]

Hello Zaz,

This depends on the application/service/role as said before. Some will list
during installation the needed permissions. Check the event viewer if something
is listed. Also a way to figure it out can be to create a scheduled task
to start the service with the problem account. Very often in the scheduled
task eventlog is listed which permissions are missing or you find more detailed
error description.

Configuration has to be set either in local or with GPMC in the OU where
the machine belongs to:
Computer configuration, windows settings, security settings, local policies,
User rights assignment, in the right pane you see the list of options.

[Zaz]

Just so you are aware the apps are Backup exec and BES, I have installed
both of these before and have never had to do any other user rights
assignments. I will try the scheduled task idea and see what happens.
however as it doesn't happen for 3weeks or so I will have to wait,.

regards

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message

news:6cb2911d92388...@msnews.microsoft.com...

[Meinolf Weber [MVP-DS]]

Hello Zaz,

BackupExec for example show during setup that the used account will get some
additional permissons. If the used account is the default administrator it
will not really be viewable because the administrator is often added by default
to the needed ones. But if another account is used check the local policy
on the machine and if it is on a DC(not the best solution for BackupExec)
the default domain controllers policy.