I am running the SQLServer 2005 ServiceBroker ExternalActivator as a Windows Service. When it fires and launches my QueueAgent application the process fails and an entry shows up in the Security Log - "A privileged service was called." (Event ID 4673). How do I give my service account the correct permissions to launch the executable? I have already given it execute permission on the file.

go to control panal click on administrative tools go to services and double click the particular service you want to change go to the logon tab and specify an account there. http://www.virmansec.com/blogs/skhairuddin

The Service has my desired Service Account specified. My Service Account is a member of the Users role which has read/execute permission on the file system.

I believe I have resolved the issue by creating an Application Control Policy to explicitly grant my User permission to run the executable. I say "I believe" because now I have another issue with my Activator returning pad PIDs when it launches the executable. But the Security event failure is no longer ocurring.