SCCM Run As Account does not have requested logon type

Question

My primary SCCM server (That I inherited in April, 10 years old and a dozen or so admins in the past) keeps throwing an alert that "The Run-As account must have requested logon right."

I don't believe the previous admin was seeing this, and I didn't see it until the last couple months (it's been low priority as I've had some other issues to resolve). How would I go about figuring out what permission is needed and resolving that?

Answer 1

Hi, @Mike Martin

Thank you for posting in Microsoft Q&A forum.

To resolve the alert regarding the Run-As account not having the requested logon type, you should first identify which Run-As account is causing the issue. You can do this by checking the Event log on the agent computer for event ID 7002. This event will provide details about the specific Run-As account that lacks the necessary "Log on as a Service" permission.

Once you identify the affected Run-As account, you can grant the required permission by following these steps:

Sign in with administrator privileges to the computer where you need to provide the permission.

Open Administrative Tools and select Local Security Policy.

Expand Local Policy and select User Rights Assignment.

Right-click on "Log on as a service" and select Properties.

Use the "Add User or Group" option to include the affected Run-As account.

Confirm the changes by clicking OK.

Do you also have SCOM installed in your environment? It seems a normal issue for SCOM, you may check this link:

https://learn.microsoft.com/en-us/answers/questions/988756/run-as-account-does-not-have-a-requested-logon-typ

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".