Windows 2016 – Installing VPN Service failed Event ID 7041

Installing the VPN service using the Add Roles and Features on a Windows 2016 Server failed Sad smile all the time …

In the Event Viewer we could see these events :

image

Event ID 7041 :

The MSSQL$MICROSOFT##WID service was unable to log on as NT SERVICE\MSSQL$MICROSOFT##WID with the currently configured password due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer.

Service: MSSQL$MICROSOFT##WID
Domain and account: NT SERVICE\MSSQL$MICROSOFT##WID

This service account does not have the required user right “Log on as a service.”
So the configuration manager could not install the local Windows Database, because lack of credentials to run as a service.

So basically it boils down to get the GPO adapted with the correct credential settings.

Solutions :

1. To edit this setting, open Group Policy Management and edit the Default Domain Policy (Or other policies if they are applied like in my case)

Navigate to Computer Configuration, Policies, Windows Settings, Security Settings, Local Policies, User Rights Assignments.

Edit Log on as a service and add the following groups:

IIS_WPG
NETWORK
NETWORK SERVICE
SERVICE
NT SERVICE\ALL SERVICES

2. See here KB 2832204 :

  • Assign the Log on as a service user right to
  • NT SERVICE\ALL SERVICES in the GPO that defines the
  • user right.

Next Run gpupdate /force

image

Next REBOOT the server …

After this the Feature was installed successfully Smile

image

And you are ready to Configure the VPN Access.

Do not use the Server Management Dashboard

image

image

But use the manual configuration method instead.

image

3. Configuration :

Configuration of simple VPN Follow these Steps :

image

image

image

image

image

Also check the Firewall settings

image

image

Enjoy!

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: