To run SQL Server Engine under a domain account (that is not a local admin) requires multiple permissions, including "Permission to read the Remote Procedure Call service"
From internet searches we have gathered for subinacl QSETIL is desired for read but we also tried just L alone. Trying to grant perms from a command prompt as administrator with and without "" around service name.
subinacl.exe /service "RpcSs" /grant=mydomain\myuser=QSETIL
Gives error: RpcSs - OpenService Error : 5 Access is denied
Just trying to display permissions using below gives the same error
subinacl.exe /service "RpcSs" /display
Both commands work fine for service EventLog so it is something to do with permissions for RpcSs the remote procedure call service.
We have tried granting full permission to local administrators as well as system to the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs
We still get the error on both Windows 10 and Server 2016. Nothing thrown to Security, System or App event log.