Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is a 2-part question:

  1. Is there anything in a Windows Server 2003 domain environment that would cause accounts granted Log On As A Service rights to lose those rights after a few hours?
  2. And if not, am I just going insane?

2 accounts used for Office Communication Server on a Windows 2003 OCS server. Services start fine, then after stopping them, on next start, they are not granted the Log On As A Service right. Grant them, and the services start again.

... and then we repeat. What in the world would cause this?

share|improve this question
up vote 4 down vote accepted

Every few hours, eh? Hmm... sounds like Group Policy refresh.

Sounds like you've got a GPO overriding the local security policy.

Run Resultant Set of Policy (RSoP) on one of the affected server computers and see if you see a GPO doing anything with the "Logon as a Service" user rights assignment. My guess is that you do.

Either alter the GPO to include the accounts that need the right or change the scope of the GPO not to apply to those computers.

share|improve this answer
Yep, that's pretty much perfect timing for a Group Policy refresh. – mrdenny Jul 29 '09 at 2:25

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.