How to Configure User Rights
If the right to log on as a service is revoked for the specified user account, restore the right by performing the following steps:
Domain Controller
If the user is in an Active Directory domain:
- Start the Active Directory Users and Computers Microsoft Management Console (MMC) snap-in.
- Right-click the Organizational Unit (OU) in which the user right to log on as a service was granted. By default, this is in the Domain Controllers OU.
- Right-click the container, and then click Properties.
- On the Group Policy tab, click Default Domain Controllers Policy, and then clickEdit. This starts Group Policy Manager.
- Expand the Computer Configuration object by clicking the plus sign (+) next to the policy object. Under the Computer Configuration object, expand Windows Settings, and then expand Security Settings.
- Expand Local Policies, and then click User Rights Assignment.
- In the right pane, right-click Log on as a service, and then click Security.
- Add the user to the policy, and then click OK.
- Quit Group Policy Manager, close Group Policy properties, and then close the Active Directory Users and Computers MMC snap-in.