Service Account problems…

I was asked a question the other day that I thought might be good to share…  The company had made some changes and suddenly SharePoint stopped working, and they got these errors in the Even log every minute (italics added for anonymity):

————————————–

Event Type:      Error
Event Source:      Office SharePoint Server
Event Category:      Office Server Shared Services
Event ID:      6482
Date:            date
Time:            time
User:            N/A
Computer:      computername
Description:
Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (ea45ac67-ede8-4be3-812c-193b10678515).
Reason: Logon failure: the user has not been granted the requested logon type at this computer
Techinal Support Details:
System.ComponentModel.Win32Exception: Logon failure: the user has not been granted the requested logon type at this computer
   at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.SynchronizeDefaultContentSource(IDictionary applications)
   at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize()
   at Microsoft.Office.Server.Administration.ApplicationServerJob.ProvisionLocalSharedServiceInstances(Boolean isAdministrationServiceJob)
————————————–

And:
————————————–

Event Type:      Error
Event Source:      Office SharePoint Server
Event Category:      Office Server Shared Services
Event ID:      6641
Date:            date
Time:            time
User:            N/A
Computer:      computer
Description:
The SSP Timer Job Distribution List Import Job was not run.
Reason: Logon failure: the user has not been granted the requested logon type at this computer
Technical Support Details:
System.ComponentModel.Win32Exception: Logon failure: the user has not been granted the requested logon type at this computer
   at Microsoft.Office.Server.Utilities.WindowsSecurity.GetUserTokenFromCredentials(String userDomainName, String password, LogonType logonType)
   at Microsoft.Office.Server.Utilities.WindowsSecurity.GetUserTokenFromCredentials(String userDomainName, String password)
   at Microsoft.Office.Server.Administration.JobHandler.Execute(Object state, Boolean timedOut)
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

————————————–

Turns out they had changed the service account (and done it correctly), but they forgot to grant the Logon as Service security right in the Local Security Admin tool for that account.  A good thing to remember :)   This is done automatically when run the SharePoint Product Install and Configuration Wizard (or run psconfig -cmd configdb -create)…

Leave a Reply