how to add "NT SERVICE\ALL SERVICES" back to the "Log on as a service" permission

Question

How can I add "NT SERVICE\ALL SERVICES" back to the "Log on as a service" permission? By default it is the only thing in "Log on as a service". It can be removed, but not added back with the local group policy editor. I have an image created by someone else with different stuff in that permission and not having NT SERVICE\ALL SERVICES appears to be creating trouble for an application installer. This is Windows Server 2019.

Answer 1

Give this one a try.
https://www.codykonior.com/2015/11/16/rebuilding-the-log-on-as-a-service-list-after-it-has-been-overwritten-by-group-policy/

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Some ideas here.
https://social.technet.microsoft.com/Forums/en-US/5cd2106f-47e0-4079-ae3b-5d3178c5d95e/how-do-i-assign-the-log-on-as-a-service-user-right-to-nt-serviceall-services-with-this-group-policy?forum=winserverGP

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

First prepare the configuration file in cmd -> secedit /export /cfg C:\secpol.cfg

Open the secpol.cfg file in a text editor and add the following line under the [Privilege Rights] section to ensure "NT SERVICE\ALL SERVICES" has the "SeServiceLogonRight" permission: SeServiceLogonRight = NT SERVICE\ALL SERVICES

run the following command in cmd:

secedit /configure /db secedit.sdb /cfg C:\secpol.cfg /overwrite

restart the computer