none
windows service startup fails when domain controller is not reachable RRS feed

  • 一般討論

  • I have a windows service which runs under a domain user account (service account) on a windows 10 20H2 (Build 19042.1165) machine.
    This account is added to the group policy "Logon as a service".
    If the domain controller is reachable (network cable plugged in) and I start the windows service it successfully starts up and is running. 
    If the network cable is unplugged (domain controller not reachable) and I start the windows service then it fails with the error message:

    The service"xxxx"on"LocalComputer"could not be started. 
    Error1057:The account name is not allowed or does not exist, or the password is invalid for the specified account name.

    How I can achieve that the service starts up successfully?


    2021年10月7日 上午 06:50

所有回覆

  • I would like to provide you the best article from Microsoft support. Check out this article I hope this may resolve your Windows service startup fails error.

    https://docs.microsoft.com/en-us/troubleshoot/windows-server/system-management-components/service-startup-permissions

    2021年10月8日 上午 06:59
  • I went through the article but it doesn't help / answer how I can achieve a successful startup if the domain controller is not available.

    2021年10月11日 上午 05:50
  • Please change local account logon desktop, start netlogon service and server,workstation。


    2021年11月8日 上午 08:36
  • Hi, I have the same issue.

    Tried following the suggested article, however did not manage to resolve it.

    Any other advice from someone who can help?

    2021年11月9日 上午 06:43
  • My tip:

    You can run the service using a built-in account, like NT AUTHORITY\NETWORK SERVICE ou NT AUTHORITY\NT SERVICE. They are local accounts. Network Service has network access (his permissions are that given to computer object in Active Directory), while NT SERVICE don't.

    You can also use LOCAL SYSTEM (or SYSTEM), however, this account has full computer access - please review security implications.

    How to change: Go to Service, open the Service properties, and on "Log On" tab, select "This Account". Then write or browse for account name.

    Hope this help. Let us know if it works.

    Good luck!

    Marcelo


    Marcelo Lucas Guimarães
    MCP, MCTS, MCDBA, MCITP
    Twitter: @mlucasg7
    Blog: http://mlucasg.wordpress.com


    2021年11月10日 上午 10:01
  • My tip:

    You can run the service using a built-in account, like NT AUTHORITY\NETWORK SERVICE ou NT AUTHORITY\NT SERVICE. They are local accounts. Network Service has network access (his permissions are that given to computer object in Active Directory), while NT SERVICE don't.

    You can also use LOCAL SYSTEM (or SYSTEM), however, this account has full computer access - please review security implications.

    How to change: Go to Service, open the Service properties, and on "Log On" tab, select "This Account". Then write or browse for account name.

    Hope this help. Let us know if it works.

    Good luck!

    Marcelo


    Marcelo Lucas Guimarães
    MCP, MCTS, MCDBA, MCITP

    Lucky to read this article, this is amazing, thanks for sharing! you try! 
    https://coloring-pages.io/



    • 已編輯 colorman4 2021年11月16日 上午 09:05
    2021年11月16日 上午 09:03
  • Yes, you are right but but this is very difficult and as a developer I can not do this work. I was view website about writing service and the developer did this work on that site very nicely. You can also visit this site and take help to complete your translation work.
    2021年11月26日 下午 02:00
  • Yes, you are right but but this is very difficult and as a developer I can not do this work. I was view website about writing service and the developer did this work on that site very nicely. You can also visit this site and take help to complete your translation work.
    2021年11月26日 下午 05:02
  • Some time ago I had a similar situation. Unfortunately, I did everything from scratch, it is a pity that I did not find these answers earlier.
    2021年11月28日 下午 08:49
  • I suggest you the best article from Microsoft Community support. Check out this article This may surely resolve your Windows service startup fails error.

    https://docs.microsoft.com/en-us/troubleshoot/windows-server/system-management-components/service-startup-permissions

    2021年12月3日 上午 09:50
  • I tried instructions in this forum. These instructions does not help, please share further details to help.
    2021年12月5日 下午 06:02
  • I tried permissions and it worked, this could be helpful. You can try reading this link. https://docs.microsoft.com/en-us/troubleshoot/windows-server/system-management-components/service-startup-permissions
    2021年12月5日 下午 06:03
  • i dint anything about this blog
    2021年12月7日 下午 04:48
  • Remember that when you change permissions at service level your are changing the security and IAM access to these services. It has some implications in your environment. So, if the service has dependencies from AD and you change the permissions locally... You are making changes in the security of the resources that are running under that service. It could be a risk.
    2021年12月10日 上午 10:45
  • I also wanna know about this , suffering from the same issue ............
    2022年1月3日 上午 03:59
  • same here
    2022年1月8日 上午 09:14
  • When the DNS associated with the machine running ADSelfService Plus do not contain the necessary information. In such cases, you need to add the Domain Controllers manually. 
    2022年1月10日 上午 06:01
  • have you found the solution?

    GO for it

    <a href="https://www.ultimateenergy.com.au/10kw-solar-system/>solution</

    Please post the answer if you have got.

    2022年1月11日 上午 12:09
  • The domain controller is unreachable from the client because of a firewall or. NTP, the Windows time service, must be running on the domain controller.
    2022年1月12日 上午 11:32