Unable to Add/Remove Role: Windows Server Requires Restart

When putting in any function or function on Windows Server 2016, an error seems that the server requires a restart: “The request to add or take away options on the desired server failed. The operation can't be accomplished, as a result of the server that you just specified requires a restart”. OK, we restart our server and check out to set up a task once more. The similar error seems. And so it goes repeatedly .

Windows Server Feature Installation error

As a consequence, we can not set up or take away any of the roles/options on Windows Server even after restarting the server and putting in the latest updates.

The server occasion log (Event Viewer -> Windows Logs -> System) reveals an error with the EventID 7041 and Service Control Manager as a supply. The occasion description says:

This service account doesn't have the required person proper "Log on as a service".

To remedy the issue, you will need to grant the logon as a service permissions to “NT SERVICEALL SERVICES” (and NT SERVICEMSSQL$MICROSOFT##WID, if the error is said to the or SQL Server function).

  1. Open the Local Group Policy Editor: gpedit.msc
  2. Go to Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> User Rights Assignment;
  3. Find the Log on as a service coverage;
  4. As you may see, there isn’t a NT SERVICEALL SERVICES on this coverage. Let’s strive to add it: Add User or Group -> NT SERVICEALL SERVICES. An error happens: identify not discovered.
    gpo - NT SERVICEALL SERVICE name not found

How are you able to add a service account to a neighborhood coverage? The solely potentialmanner I may discover to grant the “Log on as a service” permissions to NT SERVICEALL SERVICES is to use the ntrights.exe instrument (from the outdated Windows Server 2003 Resource Kit).

Download and set up the Server 2003 Resource Kit (rktools.exe), then grant the SeServiceLogonRight permission utilizing these instructions within the elevated command immediate:

cd “C:Program Files (x86)Windows Resource KitsTools”
ntrights.exe +r SeServiceLogonRight -u “NT SERVICEALL SERVICES”

Granting SeServiceLogonRight to NT SERVICEALL SERVICES ... profitable

ntrights.exe SeServiceLogonRight to NT SERVICEALL SERVICES

If there isn’t a NETWORK SERVICE within the present permissions listing, add this account as nicely. If obligatory, add the permissions for NT SERVICEMSSQL$MICROSOFT##WID in the identical manner:

ntrights.exe +r SeServiceLogonRight -u “NT SERVICEMSSQL$MICROSOFT##WID”

Make positive that NT SERVICEALL SERVICES has appeared within the “Log on as a service” permissions within the Group Policy Editor console.

Log on as a service local policy

Restart your Windows Server and check out to set up/take away a task once more. No errors ought to seem.

Check Also

How to Use Native SSH Client in Windows 10?

The built-in SSH shopper appeared in Windows 10 and Windows Server 2019. Ssh.exe can be …

Leave a Reply

Your email address will not be published. Required fields are marked *