Windows OS Hub
  • Windows
    • Windows 11
    • Windows Server 2022
    • Windows 10
    • Windows Server 2019
    • Windows Server 2016
  • Microsoft
    • Active Directory (AD DS)
    • Group Policies (GPOs)
    • Exchange Server
    • Azure and Microsoft 365
    • Microsoft Office
  • Virtualization
    • VMware
    • Hyper-V
  • PowerShell
  • Linux
  • Home
  • About

Windows OS Hub

  • Windows
    • Windows 11
    • Windows Server 2022
    • Windows 10
    • Windows Server 2019
    • Windows Server 2016
  • Microsoft
    • Active Directory (AD DS)
    • Group Policies (GPOs)
    • Exchange Server
    • Azure and Microsoft 365
    • Microsoft Office
  • Virtualization
    • VMware
    • Hyper-V
  • PowerShell
  • Linux

 Windows OS Hub / Windows Server 2016 / Unable to Add/Remove Role: Windows Server Requires Restart

December 4, 2020 Windows Server 2016Windows Server 2019

Unable to Add/Remove Role: Windows Server Requires Restart

When installing any role or feature on Windows Server 2016, an error appears that the server requires a restart: “The request to add or remove features on the specified server failed. The operation cannot be completed, because the server that you specified requires a restart”. OK, we restart our server and try to install a role again. The same error appears. And so it goes repeatedly .

Windows Server Feature Installation error "The request to add or remove features on the specified server failed, because the server requires a restart"

As a result, we cannot install or remove any of the roles/features on Windows Server even after restarting the server and installing the latest updates.

The server event log (Event Viewer -> Windows Logs -> System) shows an error with the EventID 7041 and Service Control Manager as a source. The event description says:

This service account does not have the required user right "Log on as a service".

To solve the problem, you must grant the logon as a service permissions to “NT SERVICE\ALL SERVICES” (and NT SERVICE\MSSQL$MICROSOFT##WID, if the error is related to the installation of the WSUS role or SQL Server role).

  1. Open the Local Group Policy Editor: gpedit.msc
  2. Go to Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> User Rights Assignment;
  3. Find the Log on as a service policy;
  4. As you can see, there is no NT SERVICE\ALL SERVICES in this policy. Let’s try to add it: Add User or Group -> NT SERVICE\ALL SERVICES. An error occurs: name not found.
    gpo - NT SERVICE\ALL SERVICE name not found

How can you add a service account to a local policy? The only possible way I could find to grant the “Log on as a service” permissions to NT SERVICE\ALL SERVICES is to use the ntrights.exe tool (from the old Windows Server 2003 Resource Kit).

Download and install the Server 2003 Resource Kit (rktools.exe), then grant the SeServiceLogonRight permission using these commands in the elevated command prompt:

cd “C:\Program Files (x86)\Windows Resource Kits\Tools”
ntrights.exe +r SeServiceLogonRight -u “NT SERVICE\ALL SERVICES”

Granting SeServiceLogonRight to NT SERVICE\ALL SERVICES ... successful

ntrights.exe SeServiceLogonRight to NT SERVICE\ALL SERVICES

If there is no NETWORK SERVICE in the current permissions list, add this account as well. If necessary, add the permissions for NT SERVICE\MSSQL$MICROSOFT##WID in the same way:

ntrights.exe +r SeServiceLogonRight -u “NT SERVICE\MSSQL$MICROSOFT##WID”

Make sure that NT SERVICE\ALL SERVICES has appeared in the “Log on as a service” permissions in the Group Policy Editor console.

Log on as a service local policy

Restart your Windows Server and try to install/remove a role again. No errors should appear.

10 comments
9
Facebook Twitter Google + Pinterest
previous post
Using Saved Queries in ADUC MMC (Active Directory User and Computers)
next post
Using SSL/TLS Certificates for Remote Desktop (RDP)

Related Reading

Remote Desktop fix: The number of connections to...

February 7, 2025

How to Hide or Show the ‘Safely Remove...

August 13, 2024

Change Network Connection (Adapter) Priorities in Windows

August 5, 2024

Fix: Multiple Connections to a Server or Shared...

July 16, 2024

Configure File and Folder Access Auditing on Windows...

June 27, 2024

10 comments

Wincent January 19, 2021 - 6:33 am

Good day.

Do you perhaps have a working link for the Windows Server 2003 Resource Kit?

I have scoured the internet with no luck of finding it

Reply
Frank December 13, 2021 - 12:01 pm

Try this: http://pub.agrarix.net/Windows/Windows%20Server%202003%20Resource%20Kit%20Tools/

Reply
Tim May 13, 2021 - 3:47 pm

I love using ntrights, as it’s from MS… but it’s not included anywhere any more, to my knowledge.
And I can’t believe how monumentally crippled Powershell seems to be in trying to add something like a privilege to a user.

Reply
Mark May 25, 2021 - 4:23 pm

Thanks for the article. Saved me from a major headache.

Reply
Augusto Cesar May 1, 2022 - 12:13 pm

It´s a security risk but you could add “everyone” , I did it and solve my problem without ntrights tool.

Reply
Brian June 29, 2022 - 9:27 pm

Hi… I did this but it did not work…. I even tried my mans suggestion above me….

Reply
James December 28, 2022 - 8:49 pm

This article worked for me, great job and a great find as most posts on other sites only state (over and over again) to uninstall/re-install WSUS and if that didn’t work you did those steps wrong. Good Article, thanks!

BTW – I found the Kit here : https://gist.github.com/eyecatchup/0107bab3d92473cb8a3d3547848fc442

Reply
ivan December 4, 2023 - 12:21 pm

I’m on Windows Server 2022 and got this error, but NT SERVICE\ALL SERVICES was already in the policy.

Reply
Nawid February 19, 2024 - 2:35 pm

Do you have any Idee i have Same Problem

Reply
Cuchau November 28, 2024 - 8:10 pm

Solved it?

Reply

Leave a Comment Cancel Reply

join us telegram channel https://t.me/woshub
Join WindowsHub Telegram channel to get the latest updates!

Categories

  • Active Directory
  • Group Policies
  • Exchange Server
  • Microsoft 365
  • Azure
  • Windows 11
  • Windows 10
  • Windows Server 2022
  • Windows Server 2019
  • Windows Server 2016
  • PowerShell
  • VMware
  • Hyper-V
  • Linux
  • MS Office

Recent Posts

  • Cannot Install Network Adapter Drivers on Windows Server

    April 29, 2025
  • Change BIOS from Legacy to UEFI without Reinstalling Windows

    April 21, 2025
  • How to Prefer IPv4 over IPv6 in Windows Networks

    April 9, 2025
  • Load Drivers from WinPE or Recovery CMD

    March 26, 2025
  • How to Block Common (Weak) Passwords in Active Directory

    March 25, 2025
  • Fix: The referenced assembly could not be found error (0x80073701) on Windows

    March 17, 2025
  • Exclude a Specific User or Computer from Group Policy

    March 12, 2025
  • AD Domain Join: Computer Account Re-use Blocked

    March 11, 2025
  • How to Write Logs to the Windows Event Viewer from PowerShell/CMD

    March 3, 2025
  • How to Hide (Block) a Specific Windows Update

    February 25, 2025

Follow us

  • Facebook
  • Twitter
  • Telegram
Popular Posts
  • How to Convert (Upgrade) Windows Server Evaluation to Full Version
  • Fixing “Winload.efi is Missing or Contains Errors” in Windows 10
  • How to Install and Activate the RDS Licensing Role and CALs on Windows Server
  • How to Connect L2TP/IPSec VPN Server From Windows
  • How to Clean Up and Compress the WinSxS Folder on Windows
  • How to Shadow (Remote Control) a User’s RDP session on Windows Server RDS
  • Configuring Proxy Settings on Windows Using Group Policy Preferences
Footer Logo

@2014 - 2024 - Windows OS Hub. All about operating systems for sysadmins


Back To Top