MID Server Install Fails - Logon as service right - but it has it.

Dave2 · ‎08-10-2020

I am attempting to setup a MID server for a test integration of SNOW. I verified that the account has "Log on as Service" on both the server that I am installing it on and on the AD Domain Controller it will pull from.

I complete the first step of the installer no problem. When I attempt to finish up the next step, I see the error below:

But this is copied directly from the server this is being installed on and you can clearly see that it DOES have that right.

Just to be sure, I checked the "Deny Log on as Service" on the server and nothing is there either...

So if it has the rights, why does the MID installer think it doesn't? Any ideas?

Thanks!

Dave2 · ‎08-13-2020

Here is an update on this. It is more or less resolved, just not the way I had anticipated. Here is what I ultimately had to do:

1. I created a new OU in my AD and moved the MID server there. I assigned a dedicated GPO to that OU that forced my service account into the Log on as Service for all servers in that OU. - This is because the local policy was trumped by the domain policy.

2. Then, I still got errors when I tried to install the server. So, I opened up a command prompt as administrator. Then, executed the MID installer using the command line (browse to the directory via command prompt and simply type the name of the installer and press "Enter").

3. All that together an "Voila!" the MID server installs. Now it's stuck on validating but that's another issue entirely.

Hopefully my solution will help others solve this issue. If you want more specific details about what I did, reply and I will reach out to you.

Thanks!

Dave

View solution in original post

Neil5 · ‎02-09-2022

Good to hear. Glad i could help.

matthew_herrman · ‎09-28-2021

For me, the issue was that we had restricted 'Access this Computer from the Network' permission on the machine and the local account which the installer tried to create was not in the group despite having correct permissions.

I also ran the installer elevated from command line, but I can't prove whether that did anything or not because I fixed ^ and ran from elevated command prompt at the same time and this was the resolution.

William David · ‎04-25-2023

For clarification: we were using a Domain Service Account {DOMAIN}\{user_name}, defined in our Active Directory instance, as the Service Account for installing our MID Server. The installation kept failing. The installer was complaining that the Service Account had administrative rights, which is no longer permitted during MID Server installation.

After investigation, I determined that the Active Directory Domain Service Account was being provisioned into the local Administrators Group of the host the MID Server application was being installed on. I had to manually remove the Domain Service Account from the local Administrators Group of the installation host. Once I did that the MID Server installation proceeded without error.