Deny log on as a service

This security setting determines which service accounts are prevented from registering a process as a service. This policy setting supersedes the Log on as a service policy setting if an account is subject to both policies.

Note: This security setting does not apply to the System, Local Service, or Network Service accounts.

Policy path: 

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment


Logoff required



Supported on: 

At least Windows XP SP2, Windows Server 2003

Registry settings: 

User Rights security settings are not registry keys

Reboot required: 


Related content