How do I grant a local user the "logon as a service" right programmatically? I have an unattended install of MSDE and am trying to configure the SqlAgent service to run under a different account than LocalSystem... I create a user during the install and re-configure the SqlAgent service to use the new user, but the logon fails because the user doesn't have the Log on as a service right.

Have a look at the local securitypolicy. Drill down to user rights. There
you can add this user to the logon as service.

Marina

"Jim" <(E-Mail Removed)> schreef in bericht
news:217096C0-A766-47DD-B95F-(E-Mail Removed)...
> How do I grant a local user the "logon as a service" right
programmatically? I have an unattended install of MSDE and am trying to
configure the SqlAgent service to run under a different account than
LocalSystem... I create a user during the install and re-configure the
SqlAgent service to use the new user, but the logon fails because the user
doesn't have the Log on as a service right.

I understand how to do it via the local security policy and the snap-in... I'm really trying to do it programmatically as part of my install so end users don't need to perform the task manually. I've read something about templates, but really have no idea how to create one. Is there any good documentation on this and can I import only the specific entries I want, or do I have to import an entire policy?

You can create a new/custom template that has only one entry such as it sounds you
need. This can be done with the mmc security templates snapin. Security templates are
incremental. You could then use the secedit command to implement the template in a
script. --- Steve

http://www.brienposey.com/kb/working...es,_part_1.asp


"Jim" <(E-Mail Removed)> wrote in message
news:E40D06F1-523E-4DBD-8C9C-(E-Mail Removed)...
> I understand how to do it via the local security policy and the snap-in... I'm
really trying to do it programmatically as part of my install so end users don't need
to perform the task manually. I've read something about templates, but really have
no idea how to create one. Is there any good documentation on this and can I import
only the specific entries I want, or do I have to import an entire policy?

Take a look at this. It may prove helpful.


279664 How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?id=279664



--------------------
> From: =?Utf-8?B?Smlt?= <(E-Mail Removed)>
> References: <217096C0-A766-47DD-B95F-(E-Mail Removed)>
<h0ryb.15368$(E-Mail Removed)>
> Subject: Re: Grant user Logon as a service right
> Date: Sun, 30 Nov 2003 13:36:05 -0800

>
> I understand how to do it via the local security policy and the
snap-in... I'm really trying to do it programmatically as part of my
install so end users don't need to perform the task manually. I've read
something about templates, but really have no idea how to create one. Is
there any good documentation on this and can I import only the specific
entries I want, or do I have to import an entire policy?
>

This posting is provided "AS IS" with no warranties, and confers no rights.

Thanks, that's exactly what I was looking for