Apache :: Apache service autostart problem

DSGNET · Joined: 27 Feb 2015 Posts: 2 Location: Hungary, Budapest

Hi anyone,

I have a problem with Apache. I'm using the latest x64 VC 11 build (2.4.12) on Windows 2008 R2 (Domain Controller). I've followed everything included on documentation to "jail" Apache (let it run by different user with restricted rights):
- Created a standard domain user
- Modified rights on web root and apache directory to have this user read rights on them. Modified Logs folder to have this user read/write rights on it.
- Granted this user "Log on as service" and "Act as part of operating system"
- Under services, modified the LocalSystem user to this user and added the password.

Problem is:
- Apache runs normally if runs by LocalSystem (as default)
- Apache runs normally, if I manually start the service (and it runs with this new user)
- Apache service does not run automatically (and throws Event id 7000 - user accound invalid or not found, or it's password is incorrect to error log).

How could I fix this, to let it run automatically? I know it worked before on Windows Server 2003 under same conditions.

What else I've tried:
- Granted the user "allow log on locally" rights
- Under Default Domain Controller Policy, I've added explicitly, that this user has rights to start/stop this service.

Any help would be appreciated. I cannot believe that I'm the only one on the face of Earth having this issue.

There must be something I've missed and not included in documentation.

Thanks

James Blond

often the AD account isn't available during the server starts. It is better to use a local account.

KenD · Joined: 30 Jul 2013 Posts: 7 Location: US, Gainesville, FL

If the service will not start automatically but you can start the service manually, it may be a dependency problem.

Take a look as msg

https://www.apachelounge.com/viewtopic.php?p=27386#27386

for how to check and set the dependencies.

Ken

DSGNET · Joined: 27 Feb 2015 Posts: 2 Location: Hungary, Budapest

No one could imagine, what the problem is.

So, I've added LanManWorkstation as dependency, but that did not help alone.

The problem is...

When You add the user right "Act as part of operating system" and "Log on as service", Windows adds the user in DOMAIN\username format.
When You modify the user which You want to run the service, Windows adds the user in username@domain format. I've modified the user to DOMAIN\username in the registry, and now it works properly.