Problem: Windows Services Don't Start
You notice that when you restart a Windows 2000 Server machine, services that aren't set to start with the Local System Account fail to start. You must manually open the service, reenter the password, and start the service. Each time you reenter the password, you receive the message <username> granted the logon as service right.
To troubleshoot this problem, start by asking the following questions:
- What has changed? Did anyone make any changes on this server?
- Did the services start in the past?
- Are the username and password valid?
You investigate and discover that the server, a DC, was until recently a member of the Domain Controllers organizational unit (OU). The services started properly until the server was moved out of that OU. The username and password you used to start the services are valid. Upon further research, you discover that members of the Domain Controllers OU have specific rights, among them the right to log on as a service. The server lost this right when it moved out of the OU; you need to restore the right to the server.
To grant the right to the server, take the following steps:
- Start the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in, then open the Domain Controllers OU's Properties dialog box.
- On the Group Policy tab, click Default Domain Controllers Policy, then click Edit. This step starts Group Policy Manager.
- Expand the Computer Configuration object, expand Windows Settings, then expand Security Settings. Expand Local Policies, then click User Rights Assignment.
- In the right-hand pane, right-click Log on as a service, then click Security.
- Add the user account used to start up the service to the policy, then click OK.
For more information about this procedure, see the Microsoft article "How to Troubleshoot Service Startup Problems" (http://support.microsoft.com/?kbid=259733).
Register
