Hi Folks, I have installed a Managed Service Account (MSA) for the WS2008r2 Fax server. The Fax service fails to start with the following error: I don't understand what the instruction tell me to do, so I'm stuck... Any advice?Thanks for the help, Chris.

I'd make sure the account has logon as a service rights. Also this one may apply. http://support.microsoft.com/kb/982261 Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows] Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hi Dave, "Logon as Service" is granted when the service account is used as a service account. So, it must be something else. I'm interested to know what Microsoft means by the phrase "view the service configuration and the account configuration." It is a bit vague. I can fire up SecPol.msc, but I have NO idea where to go or what I seek.Thanks for the help, Chris.

Maybe something here sheds some light. http://blogs.technet.com/b/askds/archive/2009/09/10/managed-service-accounts-understanding-implementing-best-practices-and-troubleshooting.aspx Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows] Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

How did you create your service account? Here is step by step MSA in AD from my blog After you create MSA you must install it on desired server syntax is: install-ADServiceAccount -identity "name of service account". This is most common mistake with MSA. And as I remember correctly limitation is one MSA for one server. It is not one to many     Best regards Dubravko Marak MCP Blog: Windows Server Administration Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Folks, I am looking for the powershell commands to investigate all the setting in verbose detail for various AD accounts -- User accounts, Managed Service accounts and the class of accounts that "Network Service" occupies. As an aside, the powershell query which tells me the class of account which is "Network Service" is also apparently necessary. This is the way to compare accounts so I can find the difference.Thanks for the help, Chris.

For that I'd ask them here. http://social.technet.microsoft.com/Forums/en/winserverpowershell/threads Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows] Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hi Dubravko, The first line of my post indicates that I have done this. I have installed a Managed Service Account (MSA) for the WS2008r2 Fax server. I think I need powershell advice.Thanks for the help, Chris.

Hi Folks, I have learned by accident that the missing privilege is access to network resources. My Fax Server works when he logs on as "NT Authority\Network Service", which raises the question, how I grant permission for network access (whatever that means...) to my MSA?Thanks for the help, Chris.

Refer to this KB: http://support.microsoft.com/kb/325349 Regards, MiyaMiya Yao TechNet Community Support