Set Log on as a Service Right

Log on as a service right is not user group based, it must be individually provide to Windows local/domain user.

To set Log on as a service right for a Windows local/domain user, do the following:

  1. From the Start menu, navigate to Control panel > Administrative tools > Local Security Policy.
  1. In the Local Security Policy window, expand the Local Policies node and select User Rights Assignment.
  1. In User Rights Assignment, navigate to the Log on as a service policy.
  1. Double-click Log on as a service.
  • The Log on as a service Properties window opens.
  1. (Optional) In addition to Log on as a service right, set the additional rights mentioned below if the system user account is not allowed to be modified in SMC:
  • Back up files and directories
  • Debug Programs
  • Manage auditing and Security log
  • Restore files and directories
  • Take ownership of files or other objects
  1. Click Add User or Group.
  1. In the Select Users, Computers, Service Accounts, or Groups dialog box, type [Machine name\User name] and click Check Names and confirm.
  1. Click OK.
  • The Log on as a service right is set for the selected Windows local/domain user.