Re: logon as service rights lost
- From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
- Date: Mon, 08 Jan 2007 10:46:07 -0500
This post is difficult to understand.
What do you mean by "AD Updates / Syncronizes the network"?
What do you mean by "more servers was installed on the same server"?
My expectation is that someone set up a domain level or OU level Group Policy that is setting the who can logon as a service right. When you enter the password, the system immediately adds the account to the local policy and then you start the service. Then along comes the group policy and cleans it back up as it is being told to do. Then the next time the service has to be stopped and started all of a sudden the account doesn't have rights again so you go through the set the password trick again when you should be looking for what Group Policies are being applied and fix the root problem.
--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net
---O'Reilly Active Directory Third Edition now available---
http://www.joeware.net/win/ad3e.htm
Bjarup wrote:
Hi.
In a win2003 server running SQL2005, IIS and other applications, I have an application that runs under a domain account and has been added to the local administrators grup. The application (server) runs as a service under the mentioned account. The account sometimes loses its "logon as service" rights when the AD updates / syncronizes the network. All that is needed to restore the accounts rights is to re-enter the password in the properties pane of the service (maybe there is another solution, but I don't know of any).
About 6 months ago i read what I believe to be a KB-article on the subject, stating that this situation could occur when more servers was installed on the same server.
But now I cannot seem to find this KB-article...
I really need this article. Please help, someone, anyone..
Thanks,
Bjarup
- Prev by Date: Re: >> newb question (crisis)? ----> lockout of windows xp pro due to screensaver password
- Next by Date: Re: corrupted local security database
- Previous by thread: >> newb question (crisis)? ----> lockout of windows xp pro due to screensaver password
- Next by thread: CA certificate template custom subject name format
- Index(es):
Relevant Pages
|
