MID Server Install Fails - Logon as service right - but it has it.

Dave2 · ‎08-10-2020

I am attempting to setup a MID server for a test integration of SNOW. I verified that the account has "Log on as Service" on both the server that I am installing it on and on the AD Domain Controller it will pull from.

I complete the first step of the installer no problem. When I attempt to finish up the next step, I see the error below:

But this is copied directly from the server this is being installed on and you can clearly see that it DOES have that right.

Just to be sure, I checked the "Deny Log on as Service" on the server and nothing is there either...

So if it has the rights, why does the MID installer think it doesn't? Any ideas?

Thanks!

Dave2 · ‎08-13-2020

Here is an update on this. It is more or less resolved, just not the way I had anticipated. Here is what I ultimately had to do:

1. I created a new OU in my AD and moved the MID server there. I assigned a dedicated GPO to that OU that forced my service account into the Log on as Service for all servers in that OU. - This is because the local policy was trumped by the domain policy.

2. Then, I still got errors when I tried to install the server. So, I opened up a command prompt as administrator. Then, executed the MID installer using the command line (browse to the directory via command prompt and simply type the name of the installer and press "Enter").

3. All that together an "Voila!" the MID server installs. Now it's stuck on validating but that's another issue entirely.

Hopefully my solution will help others solve this issue. If you want more specific details about what I did, reply and I will reach out to you.

Thanks!

Dave

View solution in original post

Community Alums · ‎08-10-2020

Hey Dave,

what is this MID server's version? I've never seen such fields in there...

It should look like this (AFAIR)..

Cheers,

Joro

Community Alums · ‎08-10-2020

Ahh, I see,

you are in AD - hence the other menu... I get it now...

Well this is for sure related to the AD. Can you try to install it as a local service?

Dave2 · ‎08-10-2020

That is correct @Joro Klifov , the screen you are seeing comes after the initial step. That part is just fine. I have actually tried this as a local service account as well with the same results:

I get the same results no matter what I put in the MID Server name and Service Account Name.

Community Alums · ‎08-10-2020

Hi again Dave,

ok, but the NT account should be either local machine user (service one - best option to me) or existing one in the AD with the relevant roles and groups - also check the policy you apply to this account. You can check this article - hope it helkps in a way 🙂

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/log-on-...

Cheers,

Joro