This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Revenera Community
- :
- InstallShield
- :
- InstallShield Forum
- :
- Error 1920 when user doesn't have Log on as a service rights.
Subscribe
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Subscribe
- Mute
- Printer Friendly Page
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
‎Mar 20, 2008
04:00 PM
Error 1920 when user doesn't have Log on as a service rights.
Error 1920 (Service failed to start) is showing up in my install when a user is an admin but doesn't have Log on as a service rights. After the install completes they can go in and add themselves and the service starts fine. I have read other threads saying this is a bug in the Install NT Services. Workaround/advice appreciated.
(3) Replies
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
‎Mar 20, 2008
04:30 PM
I haven't played with this in a long time but when I did it I was able to cheat by creating a GPO object for the OU that contained the computers that granted a network user logon as service right for each machine's LSA.
I also believe it's a bug in the standard action but none the less you have to work around it. Basically you need a CA that will grant the right before calling start service. Or just don't use MSI's installservice pattern and instead use the InstallScript functions.
For the former, checkout:
http://msdn2.microsoft.com/en-us/library/ms676910(VS.85).aspx
I also believe it's a bug in the standard action but none the less you have to work around it. Basically you need a CA that will grant the right before calling start service. Or just don't use MSI's installservice pattern and instead use the InstallScript functions.
For the former, checkout:
http://msdn2.microsoft.com/en-us/library/ms676910(VS.85).aspx
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
‎Apr 13, 2009
06:56 PM
Another way I've found to do this is by using the NTRights utility that comes with the Windows Server 2003 Resource Kit. Here is the command that you can use:
ntrights.exe -u [SERVICE_USER/GROUP] +r SeServiceLogonRight
It took me a long time to find this answer but hope this helps everyone!
ntrights.exe -u [SERVICE_USER/GROUP] +r SeServiceLogonRight
It took me a long time to find this answer but hope this helps everyone!
![](/skins/images/8CE4FAD0DE6F3A6F9D0567434D2D2DAE/responsive_peak/images/icon_anonymous_message.png)