Add the Log on as a service Right to an Account

i need to deploy this to a range of member servers, i note i can use mmc on the dc,

But cannot see how i can add an account to this service without taking control and removing existing accounts, i also dont want to stop accounts from being added
Who is Participating?
AbhishekJhaConnect With a Mentor Commented:
Emmanuel AdebayoConnect With a Mentor Global Windows Infrastructure Engineer - ConsultantCommented:

You can implement this through the use of group policy (GPO), on a domain controller or on a computer that has the Windows Server 2003 Administration Tools Pack installed
1.Open Active Directory Users and Computers.
2.In the console tree, right-click the domain or organizational unit (OU) for which you want to edit security settings.
3.Click Properties, and then click the Group Policy tab.
4.In Group Policy Object Links, click the Group Policy object for the domain or OU for which you want to edit security settings, and then click Edit.
5.In the console tree, click User Rights Assignment.
           * GroupPolicyObject [ComputerName] Policy
           * Computer Configuration
           * Windows Settings
           * Security Settings
           * Local Policies
           * User Rights Assignment
6.Double-click Log on as a service in the details pane.
7.If this security setting has not yet been defined, select the Define these policy settings check box.
8.Click Add User or Group, and then add the appropriate account to the list of accounts that possess the Log on as a service right

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.