Dcpromo and the logon as a service story.

There once was a file and print server that needed to be a domain controller. Install the dns service, then dcpromo it.

I forgot to take note that the dcpromo process applies a security template for domain controllers in the system. So accounts used by third party services may need to have the “allow logon as service” right assigned to it.

The easiest way to make this happen is go into the service, try to start it, watch it fail.  Then go to the password, type it in (twice), then click ok. You should see a popup dialog box indicating that the account has been given the above mentioned privilege.

The service in my case was Backup Exec.

Advertisements

About Mike

owner of blog
This entry was posted in Active Directory. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s