After every reboot I have to re-enter password to service running with local account. The service was unable to log on as .\localguy with the currently configured password due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. The user account has been set to Local Security Policy Log on as service. And it's staying there, so GPO is not rewriting it.Any idea what is causing this? n00b for life

Is the server also a domain controller?Perhaps you need to grant "Log on locally" user right to the apropriate container. In case of the DC, that would be "Domain Controllers", unless it was moved to some other OU.

Hello K_LPlease run "rsop.msc" on the computer to ensure that there is no GPO over-ride the Security Policy.Meanwhile, please also update the account password in the service.msc console accordingly, then reboot the server to check the result.Regards,Wilson Jia This posting is provided "AS IS" with no warranties, and confers no rights.

Hello, thanks for answers. The computer is not Domain Controller. It is Windows 2008 server on Windows 2000 domain. I opened the Local Security Policy and tried to add the user on log on locally. But I'm unable to add any users or groups (running as administrator). After that I ran the rsop.msc and noticed that indeed logon as services doesn't contain any local users. Is this overriding the local settings?Simple answer would be that I make a domain account, but I was told that the service needs to be running with local user only. Edit:I rebooted it now and the account was missing from Allow login as service. So I need somehow make it stick there. n00b for life

Hi K_L,If the logon as a service is "NOT Defined" in the "rsop.msc" output, it means your Local Security Policy setting takes effect. Have you also added the user account into " log on locally" group? If you change a local administrator account to run this service, does it work through?Regards,Wilson JiaThis posting is provided "AS IS" with no warranties, and confers no rights.

I changed logon as service to not defined in GPO. This stopped the rewriting and solved the problem.n00b for life