If you grant a domain user the Logon as a service user right in the default domain policy, the SMS (Systems Management Server) Client service may not start on a Windows 2000 Professional client.

The Logon as a service user right in the default domain policy takes precedence over the Logon as a service user right set locally, including the SMSClisvcacct account that the SMS Client service runs under. The SMSClisvcacct account, which is local and unique on every Windows 2000 client that is not a domain controller, fails to logon.

To workaround this behavior, only grant the Logon as a service user right locally.