【问题描述】
===========================
安装WSUS服务时,无法完成,报the operation cannot be completed, because the server that you specified requires a restart错误及7041的事件日志错误
Log Name: System
Source: Service Control Manager
Date: 2013-12-17 11:28:21 AM
Event ID: 7041
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DC02.test.com
Description:
The MSSQL$MICROSOFT##WID service was unable to log on as NT SERVICE\MSSQL$MICROSOFT##WID with the currently configured password due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer.
Service: MSSQL$MICROSOFT##WID
Domain and account: NT SERVICE\MSSQL$MICROSOFT##WID
This service account does not have the required user right "Log on as a service."
User Action
Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster.
If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7041</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2013-12-17T03:28:21.867497900Z" />
<EventRecordID>1862</EventRecordID>
<Correlation />
<Execution ProcessID="556" ThreadID="2864" />
<Channel>System</Channel>
<Computer>DC02.test.com</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">MSSQL$MICROSOFT##WID</Data>
<Data Name="param2">NT SERVICE\MSSQL$MICROSOFT##WID</Data>
</EventData>
</Event>
【解决方法】
===========================
1\在Windows 2012服务器打开
Group Policy Management->Computer Configuration—>Policies—>Windows Settings—>Security Settings—>Local Policies—>User Rights Assignment
2\找到Logon as Service然后选择属性,单击Add user or Group,然后输入 NT SERVICE\ALL SERVICES,IIS_WPG, NETWORK, NETWORK SERVICE, SERVICE点击OK
3\在CMD下执行gpupdate /Force
4\再一次打开本地安全策略管理器或是运行rsop.msc看是否修改生效
5\尝试再次执行安装
【参考资料】
===========================
http://gyorgybalassy.wordpress.com/2013/08/10/installing-wsus-on-windows-server-2012/