Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

This is a 2-part question:

  1. Is there anything in a Windows Server 2003 domain environment that would cause accounts granted Log On As A Service rights to lose those rights after a few hours?
  2. And if not, am I just going insane?

2 accounts used for Office Communication Server on a Windows 2003 OCS server. Services start fine, then after stopping them, on next start, they are not granted the Log On As A Service right. Grant them, and the services start again.

... and then we repeat. What in the world would cause this?

share|improve this question

1 Answer 1

up vote 4 down vote accepted

Every few hours, eh? Hmm... sounds like Group Policy refresh.

Sounds like you've got a GPO overriding the local security policy.

Run Resultant Set of Policy (RSoP) on one of the affected server computers and see if you see a GPO doing anything with the "Logon as a Service" user rights assignment. My guess is that you do.

Either alter the GPO to include the accounts that need the right or change the scope of the GPO not to apply to those computers.

share|improve this answer
    
Yep, that's pretty much perfect timing for a Group Policy refresh. –  mrdenny Jul 29 '09 at 2:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.