<div>
Start/run/secpol.msc /a<br />
Navigate to Local Policies/User Rights Assignments<br />
Log on as a service is in the right-pane...double click it to remove the account.
</div>


Start/run/secpol.msc /a
Navigate to Local Policies/User Rights Assignments
Log on as a service is in the right-pane...double click it to remove the account.

<div>
Well, I got that far, which is why I'm posting here. &nbsp;What I get when I double click the policy is a window listing who its assigned to, local setting and effective setting. Listed are two users and one group (to which one of the users belongs). &nbsp;*None of the local policy setting boxes are checked* &nbsp;So how do I remove a user from this list? &nbsp;There's an option to add, but not remove.
</div>


Well, I got that far, which is why I'm posting here.  What I get when I double click the policy is a window listing who its assigned to, local setting and effective setting. Listed are two users and one group (to which one of the users belongs).  *None of the local policy setting boxes are checked*  So how do I remove a user from this list?  There's an option to add, but not remove.

<div>
Nevermind, I found the solution. &nbsp;I was editing the local security settings, this permission was being set by the domain controller security policy.<br />
<br />
I can remove it by going to security settings: local policies: user rights. &nbsp;If I pull it up, I then have an option of removing it.<br />
<br />
I found it in the dompol.msc, not in secpol.msc.<br />

</div>


Nevermind, I found the solution.  I was editing the local security settings, this permission was being set by the domain controller security policy.

I can remove it by going to security settings: local policies: user rights.  If I pull it up, I then have an option of removing it.

I found it in the dompol.msc, not in secpol.msc.


<div>
<div class="content wysiwyg-content">
Recently, I started a service using a user account. &nbsp;I was told that user account was granted &quot;Log on as a service&quot; privileges (naturally). &nbsp;So, after changing it back, now I want to remove those permissions. &nbsp;I'm using Active Directory. &nbsp;How do I do that?<br />
<br />
TIA
</div>
</div>


Recently, I started a service using a user account.  I was told that user account was granted "Log on as a service" privileges (naturally).  So, after changing it back, now I want to remove those permissions.  I'm using Active Directory.  How do I do that?

TIA

how do I remove user permissions?

Windows 2000 is an operating system for use on both client and server computers. It is the successor to Windows NT 4.0, and is the last version of Microsoft Windows to display the "Windows NT" designation. Four editions of Windows 2000 were released (Professional, Server, Advanced Server, and Datacenter Server) that shared a core set of features, including many system utilities such as the Microsoft Management Console. All versions of the operating system support NTFS 3.0, Encrypting File System, as well as basic and dynamic disk storage. The Windows 2000 Server family includes support for Active Directory services, Distributed File System and fault-redundant storage volumes.