I am having a bit of a nightmare trying to get a solution to my problem. Here it is:
We have multiple customers who each create local accounts on their servers in order to run a specific service, i.e. grant the “Log on as a service” right.
This will work just fine until the Group Policy comes along 90 minutes or so later and, as the “Log on as a service” right is empty, the rights are removed from that user
I have tried using Restricted Groups in GP to try and add a local group (to which the user running the service is a member) to the local administrators group, but this just gave me 1202 0x4b8 errors in Windows when applying the policy, which I guess is because I’m doing something I can’t?
No matter which way I cut it, I don’t seem to be able to get an answer which will work.
ANY help would be appreciated, before I go mad!
Thanks,
TE
