Granting Logon as Service Right on the Host Computer (Windows)

MSDN Library
Win32 and COM Development
Administration and Management
Directory, Identity, and Access Services
Directory Services
Directories
Active Directory Domain Services
Using Active Directory Domain Services
Service Logon Accounts
Installing a Service on a Host Computer

Granting Logon as Service Right on the Host Computer

Testing Whether Running on a Domain Controller

Related Links

Binding to Active Directory Domain Services
Searching in Active Directory Domain Services
Creating and Deleting Objects in Active Directory Domain Services
Moving Objects
Reading and Writing Attributes of Objects in Active Directory Domain Services
Controlling Access to Objects in Active Directory Domain Services
Extending the Schema
Extending the User Interface for Directory Objects
Managing Users
Managing Groups
Tracking Changes
Service Publication
Service Logon Accounts
Mutual Authentication Using Kerberos
Backing Up and Restoring an Active Directory Server
Storing Dynamic Data
Application Directory Partitions
Detecting the Operation Mode of a Domain

Granting Logon as Service Right on the Host Computer

Granting Logon as Service Right on the Host Computer

When installing a service to run under a domain user account, the account must have the right to logon as a service on the local computer. Be aware that this logon right applies only to the local computer and must be granted in the local LSA policy of each host computer. This step is not required if your service runs as LocalSystem, which, by default, is granted this right.

Send comments about this topic to Microsoft

Build date: 11/12/2009