Grant logon as access right

[Beemer Biker]

I am having trouble getting a service account to logon. XP pro with 2003
server. I thought the problem was in InstallShield were we are trying to
install 5 services, all using the same "domain\username" and "password" not
sure where the problem is anymore. I thought the problem was with the way
installshield setup the services, but it appears to be a policy problem.

The domain controller "domain" has user "username" set with the right to
start a local service. The "password' is set correctly. According to
directory services (the policy actually) that user should be able to start a
service.

After installing the 5 services on an XP Pro sp2 system, none of them will
execute unless I change the password. The password does not actually have
to be changed, it just needs to be applied. It is not necessary to change
it on all 5 services, just one service.

eg: I bring up CONTROLPANEL - ADMINSTUFF - SERVICES and cannot start any of
the 5 services. All say logon denied. If I pick any of the services and
type in "password' and click on apply I get a message saying "logon right
granted to service" or something to that effect. All the rest of the
services can now be started.

Each system was created using sysprep. Could sysprep be removing the
service rights? I am not doing the syepreping, another developer is so I am
just guessing. How can I track down this problem?

...thanks..


--
=======================================================================
Beemer Biker (e-mail address removed)
http://TipsForTheComputingImpaired.com
http://ResearchRiders.org Ask about my 99'R1100RT
=======================================================================

 

[Steven L Umbach]

The problem probably is that the user account you use for the service needs
to have the user right for logon as a service which you can do in Local
Security Policy [secpol.msc] under local policies/user rights unless that
user right is enforced at the domain/OU level in which case you will need to
configure it at that level. The link below explains more. --- Steve

http://www.microsoft.com/resources/...Windows/XP/all/reskit/en-us/prnd_urs_wyxu.asp

Log on as a service
(SeServiceLogonRight)
Allows a security principal to log on as a service. Services can be
configured to run under the Local System, Local Service, or Network Service
accounts, which have a built-in right to log on as a service. Any service
that runs under a separate user account must be assigned the right.
Default setting: Network Service.