WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Log on as a service

Log on as a service

AKA: SeServiceLogonRight, Log on as a service

Default assignment: none

This right is required by the account that any service runs under. 

Deny log on as a service overrides this right if a user has both. 

Use of this right does not generate a Privilege Use event in the Windows security log logons associated with service startups do generate event ID 540/4624 with logon type 5. 

Changes to these logon rights assignments are logged by event IDs 621/4717 and 622/4718.

More information at Logon Rights.

Back to top


Additional Resources