Log on as a Service
bill bacoyiannis
hi bill,
in addition santhosh's suggestion, need confirm whether accounts has been granted "log on service" permission.
you can run command "rsop.msc" verify it. if accounts has been granted "log on service" permission successfully, it's easier use hookapi capture logs when relevant service gets stopped.
you can follow steps below capture service statues logs.
1. download files "detoured.dll, hookapi.dll" following path:
https://sftasia.one.microsoft.com/choosetransfer.aspx?key=71d6e5dc-f5d3-447d-a37f-e02e1fa22b78
password: uk20ueo1z7jojh
2. put attached 2 files system32 folder.
3. set registry key appinit_dlls hookapi.dll.
hkey_local_machine\software\microsoft\windows nt\currentversion\windows
appinit_dlls
4. restart system , try stop/start service.
as expected, log file should saved in c:\ folder.
wilson jia
technet subscriber support in forum
if have feedback on our support, please contact tngfb@microsoft.com
this posting provided "as is" no warranties, , confers no rights. please click "mark answer" when correct reply question.
Windows Server > Security
Comments
Post a Comment