Assigning Log On As A Service rights - SQL SERVER SERVICE ACCOUNT PROBLEMS

Assigning Log On As A Service rights

8.7.1

Assigning Log On As A Service rights on Microsoft Windows XP and Microsoft Windows Vista manually

To assign Log on as a service rights to a user account on Microsoft Windows XP (SP2) or Microsoft Windows Vista machine manually:

1. Navigate to Start ► Control Panel ► Administrative Tools ► Local Security Policy.

2. Expand Security Settings ► Local Policies ► User Rights Assignment.

3. Right-click Log on as a service from the right panel and click Properties.

4. Select the Local Security Setting tab.

5. Click Add User or Group button.

6. Key in the account name and click OK.

7. Click Apply and OK.

8. Close Local Security Settings dialog.

9. Close all open windows.

8.7.2

Assigning Log On As A Service rights on a server machine manually

To assign Log on as service rights to a user account on Microsoft Windows Server 2003 or Microsoft Windows Server 2008 machines manually:

1. Navigate to Start ► Programs ► Administrative Tools ► Local Security Policy.

Screenshot 69 - Microsoft Windows Server: Local Security Policy window

2. Expand Security Settings ► Local Policies ► User Rights Assignment.

3. Right-click Log on as a service from the right panel and click Properties.

4. Select the Local Security Setting tab.

5. Click Add User or Group button.

6. Key in the account name and click OK.

7. Click Apply and OK.

8. Close all open windows.

8.7.3

Assigning Log On As A Service rights using GPO in Microsoft Windows Server 2003

To assign Log on as service rights on clients’ machines through Microsoft Windows Server 2003 GPO:

1. Navigate to Start ► Programs ► Administrative Tools ► Active Directory Users and Computers on the DNS server.

2. Right-click the domain node and click Properties.

Screenshot 70 - Active Directory GPO dialog

3. Select Group Policy tab in the Domain Properties dialog.

4. Select Default Domain Policy from the list and click Edit

Screenshot 71 - GPO Editor window

5. Expand Computer Configuration ► Windows Settings ► Security Settings ► Local Policies and click User Rights Assignment.

6. Right-click Log on as a service from the right panel and click Properties.

7. Select the Security Policy Setting tab.

8. Check Define these policy settings checkbox

9. Click Add User or Group button.

10. Key in the account name and click OK.

11. Click Apply and OK.

12. Close all open windows.

8.7.4

Assigning Log On As A Service rights using GPO in Microsoft Windows Server 2008

To assign Log on as service rights on clients’ machines through Microsoft Windows Server 2008 GPO:

1. In the command prompt key in mmc.exe and press Enter.

2. In the Console Root window, navigate to File ► Add/Remove Snap-in… to open the Add or Remove Snap-ins window.

Screenshot 72 - Add/Remove Snap-ins window

3. Select Group Policy Management from the Available snap-ins list, and click Add.

4. Click OK.

Screenshot 73 - Console Root domain window

5. Expand Group Policy Management ► Forest ► Domains and .

6. Right-click Default Domain Policy and click Edit to open the Group Policy Management Editor.

Screenshot 74 - Group Policy Management Editor window

7. Expand Computer Configuration ► Policies ► Windows Settings ► Security Settings ► Local Policies and click User Rights Assignment.

8. Right-click Log on as a service from the right panel and click Properties.

9. Select the Security Policy Setting tab.

10. Check Define these policy settings checkbox

11. Click Add User or Group button.

12. Key in the account name and click OK.

13. Click Apply and OK.

14. Close all open windows.