Adding user to 'log on as a service'

Posted on 2009-02-12
Medium Priority
Last Modified: 2012-05-06
I have recently installed BES on 2003 r2.

I require the besadmin account to be able to start a service.

But when i go into local security settings then log on as a service the add user to the group button is grey'd out. Any idea how I can add this as I have to start the service as the domain admin and then change the credentials to the besadmin then restart and it seems to work ?

Im stumped, help would be great.
Question by:Ben Campbell
1 Comment
LVL 85

Accepted Solution

oBdA earned 2000 total points
ID: 23624779
This user right is coming from a domain security policy. Use gpresult or the GPMC to find out where it's coming from, and then either add the account directly in this GPO, or create a new GP with a higher priority and add the service account there (and other accounts requiring this permission - User Rights policies in different GPOs are not additive, the last one applied "wins" it all).

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Screencast - Getting to Know the Pipeline
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question