Jay Paloma's Tech and Music Blog

Sometimes, this writer can no longer distinguish between the two.

NT SERVICE\ALL SERVICES — cannot grant Log on as a Service role

with one comment

Pissed off at NT SERVICE\ALL SERVICES not being able to grant Log on as a service role because the Local Security Policy “cannot find it?” Here’s an unelegant but working quickie:

  • Grant EVERYONE Log on as a service rights
  • Install the service you need
  • If the service uses an NT SERVICE\* as its service account, create a LOCAL ACCOUNT and grant it Log on as a service right. Replace the NT SERVICE\* service account in services.msc.
  • Reboot the machine. The service you installed should still be there. (the problem manifests itself when you reboot the machine and the service you installed gets uninstalled).
  • Remove EVERYONE from Log on as a service right
  • Reboot the machine again. verify that the service is still present.

NOTE: Be aware of the security repercussions of this post before following anything you read online!


Written by jpaloma

May 22, 2014 at 9:57 PM

One Response

Subscribe to comments with RSS.

  1. 7 Dec 2015, as I’m taking stock of my techblog’s performance, this article is the most searched item. Apparently there’s a lot of admins out there who were hit with this issue


    December 7, 2015 at 12:03 AM

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: