Last I was installing a service I wrote to synchronize some data to another system. I created a new domain user for this and created the user in CRM with only a few security options. Just like the MS CRM SDK tells us to.

When configuring the credentials for this service I got the following message.
The account <<My Domain Account>> has been granted the Log On As A Service right.

The user needs to have this right to run a service. The problem is that after a while or when the server reboots, the service won’t run anymore and gives the message: This service account does not have the necessary user right “Log on as a service.”

To give this user the “Log on as a service” right permanently I did the following:

On the server go to start => run and type mmc
Go to file => add/remove snapping
Click on Add
Select “Group Policy Object Editor” and click on add => Finish 

Expand the treeview:
=> Console Root => Local Computer Policy => Computer Configuration => Window Settings => Security Settings => Local Policies => User Rights Assignment
Find the “Logon as a service” policy and open it.
Add the user to the user list.

This did the job for me. I hope for you too and let me know if it doesn’t.