[SQLSERVER] [GPO] Add the Log on as a service Right to an Account

Add the Log on as a service Right to an Account

Updated: August 8, 2008

Applies To: Windows Server 2008

You can use this procedure to add the Log on as a service right to an account on your computer.

Membership in the local Administrators group, or equivalent, is the minimum required to complete these procedures. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (http://go.microsoft.com/fwlink/?LinkId=83477).

To add the "Log on as a service" right to an account on your local computer

 

1. To open Local Security Policy, click Start, point to Control Panel, point to Administrative Tools, and then double-click Local Security Policy.

2. In the console tree, double-click Local Policies, and then click User Rights Assignment.

3. In the details pane, double-click Log on as a service.

4. Click Add User or Group, and then add the appropriate account to the list of accounts that possess the Log on as a service right.

To add the "Log on as a service" right to an account for a Group Policy object, when you are on a server that is joined to a domain or a domain controller

 

1. Click Start, point to Run, type mmc, and then click OK.

2. On the File menu, click Add/Remove Snap-in.

3. In Add/Remove Snap-in, click Add, and then, in Add Standalone Snap-in, double-click Group Policy Object Editor.

4. In Group Policy Object, click Browse, browse to the Group Policy object (GPO) that you want to modify, click OK, and then click Finish.

5. Click Close, and then click OK.

6. In the console tree, click User Rights Assignment.

   Where?

   • GroupPolicyObject [ComputerName] Policy
   • Computer Configuration
   • Windows Settings
   • Security Settings
   • Local Policies
   • User Rights Assignment

7. In the details pane, double-click Log on as a service.

8. If the security setting has not yet been defined, select the Define these policy settings check box.

9. Click Add User or Group, and then add the appropriate account to the list of accounts that possess the Log on as a service right.