I'm testing BOINC deployment in an AD domain; deployment and configuration were successful, the machine auto-joined the account manager and from their attached to the desired project... And it worked for a day.

The problem I am now having;

Client machine boots, BOINC service fails to start with following System Event

The BOINC service was unable to log on as .\boinc_master with the currently configured password due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer.

We have a domain group policy that defines which accounts can run as a service - and is obviously overriding the local policy that allowed boinc_master to run as a service.

How do I overcome this?

I am looking for a clean, automated way of resolving this problem.

I'm grateful for any suggestions.

Please ignore my question - when I first attempted to add boinc_master to the domain policy to allow logon as service I had copied it from the client machine's service credentials - which includes

.\

in the account name - and prevents the account from being validated.

By simply adding

boinc_master

without the

.\

it worked fine and the BOINC service can start.