security policy AD

add new user wanted to make them logon as service.

under local security policy mmc
under local policies
under user rights assignment , added user to logon locally and log on as service
note: effective policy was greyed out

next had to goto Domain Controller Security Policy
under local policies
under user rights assignment , added user to logon locally and log on as service
note: effective policy above was still greyed out
so ran secedit /refreshpolicy machine_policy
secedit /refreshpolicy user_policy
this seems to make it work