This service account does not have the required user right "Log on as a service."

book

Article ID: 173630

calendar_today

Updated On:

Products

IT Management Suite

Issue/Introduction

The Altiris Service and other services stop and fail to start with event id 7041

Log Name:      System
Source:        Service Control Manager
Date:          01/01/2000 00:00:00
Event ID:      7041
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      COMPUTERNAME
Description:
The AeXSvc service was unable to log on as DOMAIN\USER with the currently configured password due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer.

Service: AeXSvc
Domain and account: DOMAIN\USER

This service account does not have the required user right "Log on as a service."

User Action

Assign "Log on as a service" to the service account on this computer.

You can use Local Security Settings (Secpol.msc) to do this.

If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster.

 

If you have already assigned this user right to the service account, and the user right appears to be removed,

check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right.

Cause

The "Log on as a service." right is required for the account that is being used in the Altiris services.

Resolution

Assign "Log on as a service" to the service account on this computer.

You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster.
 
If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right.