none
Service Account configuration

    Frage

  • Hi Folks,

    I have installed a Managed Service Account (MSA) for the WS2008r2 Fax server.  The Fax service fails to start with the following error:

    I don't understand what the instruction tell me to do, so I'm stuck...

    Any advice?


    Thanks for the help,

    Chris.

    Samstag, 9. Juni 2012 22:10

Antworten

Alle Antworten

  • I'd make sure the account has logon as a service rights. Also this one may apply.

    http://support.microsoft.com/kb/982261

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Samstag, 9. Juni 2012 22:21
  • Hi Dave,

    "Logon as Service" is granted when the service account is used as a service account.  So, it must be something else.

    I'm interested to know what Microsoft means by the phrase "view the service configuration and the account configuration."  It is a bit vague.  I can fire up SecPol.msc, but I have NO idea where to go or what I seek.


    Thanks for the help,

    Chris.

    Samstag, 9. Juni 2012 23:24
  • Maybe something here sheds some light.

    http://blogs.technet.com/b/askds/archive/2009/09/10/managed-service-accounts-understanding-implementing-best-practices-and-troubleshooting.aspx

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Samstag, 9. Juni 2012 23:39
  • How did you create your service account?

    Here is step by step MSA in AD from my blog

    After you create MSA you must install it on desired server

    syntax is: install-ADServiceAccount -identity "name of service account". This is most common mistake with MSA.

    And as I remember correctly limitation is one MSA for one server. It is not one to many

    
    
    
    
    

    Best regards
    Dubravko Marak
    MCP
    Blog: Windows Server Administration
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Montag, 11. Juni 2012 12:07
  • Hi Folks,

    I am looking for the powershell commands to investigate all the setting in verbose detail for various AD accounts -- User accounts, Managed Service accounts and the class of accounts that "Network Service" occupies.  As an aside, the powershell query which tells me the class of account which is "Network Service" is also apparently necessary.  This is the way to compare accounts so I can find the difference.


    Thanks for the help,

    Chris.

    Montag, 11. Juni 2012 18:50
  • For that I'd ask them here.

    http://social.technet.microsoft.com/Forums/en/winserverpowershell/threads

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • Als Antwort markiert cjm51213 Montag, 11. Juni 2012 19:08
    • Tag als Antwort aufgehoben cjm51213 Montag, 11. Juni 2012 19:19
    • Als Antwort markiert Miya YaoModerator Mittwoch, 27. Juni 2012 09:49
    Montag, 11. Juni 2012 18:53
  • Hi Dubravko,

    The first line of my post indicates that I have done this.

    I have installed a Managed Service Account (MSA) for the WS2008r2 Fax server.

    I think I need powershell advice.


    Thanks for the help,

    Chris.

    Montag, 11. Juni 2012 18:56
  • Hi Folks,

    I have learned by accident that the missing privilege is access to network resources.  My Fax Server works when he logs on as "NT Authority\Network Service", which raises the question, how I grant permission for network access (whatever that means...) to my MSA?


    Thanks for the help,

    Chris.

    Montag, 11. Juni 2012 19:22
  • Refer to this KB: http://support.microsoft.com/kb/325349

    Regards,

    Miya


    Miya Yao

    TechNet Community Support

    Dienstag, 19. Juni 2012 08:47