Windows could not start the Symantec DLP Domain Controller Agent service on Local Computer

Products

• Data Loss Prevention Enterprise Suite
• Data Loss Prevention

Issue/Introduction

You installed and configured domain controller agent with all requirements in Data Loss Prevention Installation Guide.

However after installation 'Symantec DLP Domain Controller Agent service' fails to start with below error:

Windows could not start the Symantec DLP Domain Controller Agent service on Local Computer.

Error 1069: The service did not start due to a logon failure.

An error with event ID: 7041 will be logged on event viewer as below:

Environment

15.7 and above.

Cause

Symantec DLP Domain Controller Agent service account does not have 'log on as service' rights.

Resolution

Provide 'Log on as a Service' permissions to the service account used by the 'Symantec DLP Domain Controller Agent service'.