Directory Services

Granting Logon as Service Right on the Host Computer

When installing a service to run under a domain user account, the account must have the right to logon as a service on the local computer. Be aware that this logon right applies only to the local computer and must be granted in the local LSA policy of each host computer.

For more information and a code example that shows how to grant this right to a user account specified in the domain\username format, see the lsaprivs code example in the PSDK. This step is not required if your service runs as LocalSystem, which, by default, is granted this right.