Click here to get back home

logon as service rights lost

 HomeNewsGroups | Search

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
logon as service rights lost Bjarup 01-08-2007
Posted by Bjarup on January 8, 2007, 4:21 am
Please log in for more thread options
Hi
In a win2003 server running SQL2005, IIS and other applications, I have an
application that runs under a domain account and has been added to the local
administrators grup. The application (server) runs as a service under the
mentioned account. The account sometimes loses its "logon as service" rights
when the AD updates / syncronizes the network. All that is needed to restore
the accounts rights is to re-enter the password in the properties pane of the
service (maybe there is another solution, but I don't know of any).

About 6 months ago i read what I believe to be a KB-article on the subject,
stating that this situation could occur when more servers was installed on
the same server.

But now I cannot seem to find this KB-article...

I really need this article. Please help, someone, anyone..

Thanks,
Bjarup

Posted by Joe Richards [MVP] on January 8, 2007, 10:46 am
Please log in for more thread options
This post is difficult to understand.

What do you mean by "AD Updates / Syncronizes the network"?

What do you mean by "more servers was installed on the same server"?


My expectation is that someone set up a domain level or OU level Group
Policy that is setting the who can logon as a service right. When you
enter the password, the system immediately adds the account to the local
policy and then you start the service. Then along comes the group policy
and cleans it back up as it is being told to do. Then the next time the
service has to be stopped and started all of a sudden the account
doesn't have rights again so you go through the set the password trick
again when you should be looking for what Group Policies are being
applied and fix the root problem.


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Bjarup wrote:
show/hide quoted text

Similar ThreadsPosted
There are currently no logon servers available to service the logon request - how to fix this error? i get it when trying to access a share one hop away. April 12, 2007, 6:03 pm
Re: There are currently no logon servers available to service the logon request - how to fix this error? January 29, 2009, 7:41 pm
Re: There are currently no logon servers available to service the logon request - how to fix this error? November 3, 2009, 10:45 am
There are currently no logon servers available to service the logon request March 30, 2009, 8:26 am
How2: User Rights on Domain but Admin Rights on Computer December 20, 2006, 3:40 pm
RE: Lost passwords November 2, 2007, 2:31 pm
Lost local admin password October 4, 2005, 8:17 pm
lost password with sbs2003 r2. Cannot log into system January 14, 2007, 11:41 pm
Server has lost inherited permissions September 26, 2007, 7:58 am
Re: Problem with File Permissions lost July 14, 2008, 8:03 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Driving a better car - Fuelzilla.com

Cabling site for homeowners and pros alike - Cabling-Design.com

Friends:

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap
Privacy Policy