• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3230
  • Last Modified:

Allow local user to run as service

One of my services, an IpSwitch WS_FTP Server and SSH server both have services that have not been restarting correctly.  I have traced it down to being the sort of error that is being caused by group policy refreshing.

Those two services depend on the PostgreSQL service to be running, under the same user account.

That user account is a local account on the server, so after a reboot, the services do not start (although set to automatic).  If I go to the properties and type in the local user account and password, then I get the message saying "User" has been granted the log on as service right.

The problem is everytime the server reboots or group policy refreshes, I have to manually start those services.

How do I set this up correctly so the server always knows to allow this local user to start a service?

2 Solutions
Change it to a domain account, instead of a local account, and then give it the right to logon as a service in a group policy that covers the server.

If you're concerned about the account being used on other server, then set the account in AD so that it's only allowed to logon on the server that it's running the services.
Henrik JohanssonSystems engineerCommented:
This is a GPO issue. When entering the user/password, the user right is granted, but will as noticed be reset next time the server is rebooted.

Create or edit GPO linked to OU with the server.
When editing the GPO, browse down to 'Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment'
Configure the 'Log on as service' and add the users/groups that shall be granted the right. Keep in mind that the policy setting is overriding the setting configured in other GPOs from higher level in OU-structure, so any granted user/group from the other GPO nead to be re-entered if they shall keep the right.

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now