I'm trying to get boinc up and running under our xp cluster. It is administered by a pair of machines running Server 2003 Ent. (SP2) Our network is fairly locked down behind ISA Server 2004 and all the clients run the ISA Firewall Utility. I'm having trouble installing and running boinc as a user with lower than domain admin privileges, and according to the rules of our firewall, only domain users have internet access (so I can't just run it from a local admin account). Group policy is set to disallow the user account interactive login, and it is allowed login as service. We do have some sensitive data on our network so I can't just put the cluster ahead of the firewall. It runs just fine when installed and run from any of the user accounts, but I'd prefer boinc to run as a service. Lately the installer is telling me that I don't have rights to start services, but I cannot seem to find out how to allow a single user account to run a single service. This may be a simple setting in GP, but as I am still teaching myself how to admin a server and group policy, I could use a little help.