Phone Lines icon GFI Support Home Start a conversation Sign in
Start a conversation
  1. GFI LanGuard
  2. GFI LanGuard - Remediation
  3. Articles

Resolving Remediation/Patch Deployment Error "The service did not start due to logon failure"

Overview

When the remediation job or auto-remediation starts deploying patches to a target machine, the following error is encountered:  The service did not start due to a logon failure.

Solution

The most common root causes for this issue are that the account used for deployment has credentials problems or does not have required permissions on the target machine. As part of the deployment process, LanGuard temporarily installs the LanGuard Patch Agent service, and the account being used for deployment should have the local administrator privileges and permission to log on to the system as a service.

Verify the Account That Runs GFI LanGuard Patch Agent Service

When installing LanGuard Patch Agent Service, the account is determined based on the type of deployment and the patches' deployment settings. Refer to the articles below for different use cases:

In both articles above, you eventually navigate to the Advanced options > Deploy patches under the following administrative account. 

mceclip0.png

  • If this option is enabled, the account specified here would install the service and deploy the patches.
  • If nothing is checked here, then the currently logged in user or the alternative credentials set up for the machine or group it belongs would be used.

Ensure that the service account credentials are not misspelled, and the account has the local administrator privileges on the target machine.

 

Enable 'Log on as a Service' for the Account above on the Remote Computer

  1. Open the Control Panel on the remote system.
  2. Go to Administrative Tools > Local Security Policy.
  3. Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.
  4. Find the Log on as a service policy and add the account that would be used to run the service and install the patches.
  5. Click Apply, then OK.

    2019-07-30_7-00-18.png

If you want to set this policy for the entire domain, perform using the domain security policy snap-in.

 

Testing

Repeat the failing patch deployment and verify that the error is gone. If the issue persists, contact GFI LanGuard Support.

Related Articles

2019-07-30_7-00-18.png

  1. 484 KB
  2. View
  3. Download
Choose files or drag and drop files
Was this article helpful?
Yes
No

  1. Priyanka Bhotika

  2. Posted
  3. Updated

Comments