NT Authority permissions

[anonymouse]

I'm suddenly having a problem with at least one of our machines at
work. DNS and nbt over tcp/ip...and any services that uses the user
"NT AUTHORITY\NetworkService" to logon get access denied when trying
to start up. This gets fixed when using the local system to start the
service instead, but I'd like to know what caused this problem and how
to fix it iin case this is a start of an epidemic at our work.

Thanks

 

[Dmitry Korolyov]

Sounds like NetworkService principal lost some privileges (log on as a
service one of the possible) as a result of security policies applied. Check
security event log on the computer - there should be a detail explanation of
the privilege not held.

 

[anonymouse]

I looked it up in event viewer and this is what I got...

"Windows cannot log you on because your profile cannot be loaded.
Check that you are connected to the network, or that the network is
functioning correctly. If this problem persists, contact your network
Administrator".

Event ID: 1500
user: NT AUTHORITY\NETWORK SERVICE.

This just happened to another person, and all nt auhotiry\local
service as well as \network service were not able to start any
services. I had to switch all services to the local system.