====== Grant Log on as a service privilege ======
o add the "Log on as a service" right to an account for a Group Policy object, when you are on a server that is joined to a domain or a domain controller
  * Click **Start**, point to **Run**, type mmc, and then click **OK**.
  * On the **File** menu, click **Add/Remove Snap-in**.
  * In **Add/Remove Snap-in**, click **Add**, and then, in **Add Standalone Snap-in**, double-click **Group Policy Object Editor**.
  * In **Group Policy Object**, click **Browse**, browse to the Group Policy object (GPO) that you want to modify, click **OK**, and then click **Finish**.
  * Click **Close**, and then click **OK**.
  * In the console tree, click User Rights Assignment.
  * Where?
      * GroupPolicyObject [ComputerName] Policy
      * Computer Configuration
      * Windows Settings
      * Security Settings
      * Local Policies
      * User Rights Assignment
  * In the details pane, double-click **Log on as a service**.
  * If the security setting has not yet been defined, select the **Define these policy settings** check box.
  * Click **Add User or Group**, and then add the appropriate account to the list of accounts that possess the **Log on as a service** right.