o add the “Log on as a service” right to an account for a Group Policy object, when you are on a server that is joined to a domain or a domain controller
Click Start, point to Run, type mmc, and then click OK.
On the File menu, click Add/Remove Snap-in.
In Add/Remove Snap-in, click Add, and then, in Add Standalone Snap-in, double-click Group Policy Object Editor.
In Group Policy Object, click Browse, browse to the Group Policy object (GPO) that you want to modify, click OK, and then click Finish.
Click Close, and then click OK.
In the console tree, click User Rights Assignment.
Where?
In the details pane, double-click Log on as a service.
If the security setting has not yet been defined, select the Define these policy settings check box.
Click Add User or Group, and then add the appropriate account to the list of accounts that possess the Log on as a service right.