Grant Log on as a service privilege
o add the “Log on as a service” right to an account for a Group Policy object, when you are on a server that is joined to a domain or a domain controller
- Click Start, point to Run, type mmc, and then click OK.
- On the File menu, click Add/Remove Snap-in.
- In Add/Remove Snap-in, click Add, and then, in Add Standalone Snap-in, double-click Group Policy Object Editor.
- In Group Policy Object, click Browse, browse to the Group Policy object (GPO) that you want to modify, click OK, and then click Finish.
- Click Close, and then click OK.
- In the console tree, click User Rights Assignment.
- Where?
- GroupPolicyObject [ComputerName] Policy
- Computer Configuration
- Windows Settings
- Security Settings
- Local Policies
- User Rights Assignment
- In the details pane, double-click Log on as a service.
- If the security setting has not yet been defined, select the Define these policy settings check box.
- Click Add User or Group, and then add the appropriate account to the list of accounts that possess the Log on as a service right.