|
Posted by Joe Richards [MVP] on January 8, 2007, 10:46 am
Please log in for more thread options
This post is difficult to understand.
What do you mean by "AD Updates / Syncronizes the network"?
What do you mean by "more servers was installed on the same server"?
My expectation is that someone set up a domain level or OU level Group
Policy that is setting the who can logon as a service right. When you
enter the password, the system immediately adds the account to the local
policy and then you start the service. Then along comes the group policy
and cleans it back up as it is being told to do. Then the next time the
service has to be stopped and started all of a sudden the account
doesn't have rights again so you go through the set the password trick
again when you should be looking for what Group Policies are being
applied and fix the root problem.
--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net
---O'Reilly Active Directory Third Edition now available---
http://www.joeware.net/win/ad3e.htm
Bjarup wrote:
show/hide quoted text
> Hi
> In a win2003 server running SQL2005, IIS and other applications, I have an
> application that runs under a domain account and has been added to the local
> administrators grup. The application (server) runs as a service under the
> mentioned account. The account sometimes loses its "logon as service" rights
> when the AD updates / syncronizes the network. All that is needed to restore
> the accounts rights is to re-enter the password in the properties pane of the
> service (maybe there is another solution, but I don't know of any).
>
> About 6 months ago i read what I believe to be a KB-article on the subject,
> stating that this situation could occur when more servers was installed on
> the same server.
>
> But now I cannot seem to find this KB-article...
>
> I really need this article. Please help, someone, anyone..
>
> Thanks,
> Bjarup
|
> In a win2003 server running SQL2005, IIS and other applications, I have an
> application that runs under a domain account and has been added to the local
> administrators grup. The application (server) runs as a service under the
> mentioned account. The account sometimes loses its "logon as service" rights
> when the AD updates / syncronizes the network. All that is needed to restore
> the accounts rights is to re-enter the password in the properties pane of the
> service (maybe there is another solution, but I don't know of any).
>
> About 6 months ago i read what I believe to be a KB-article on the subject,
> stating that this situation could occur when more servers was installed on
> the same server.
>
> But now I cannot seem to find this KB-article...
>
> I really need this article. Please help, someone, anyone..
>
> Thanks,
> Bjarup