Forum Discussion
Azure ATP service not starting
Hi,
I was able to resolve the issue myself. A Default Domain Controller Policy GPO had overwritten the default settings for the security policy "log on as service". „NT SERVICE\ALL SERVICES“ was missing and after adding this group, the service was able to start
Hello marioschaupp ,
Please note it's not clear for me. We are unable to run the service AATPSensor.
Is it in local policy of the server or via Domain controller ?
Error 1068
- Same issue here. Can't start the sensor service on DCs. the gMSA account has Log in Locally rights on domain controller GPO. Hope someone can post authoritative information on this.
- Hello
I disable the service and now able to restart the same.
Issue I get is due to Firewall policy on internet restriction.
marioschaupp where exactly do you modify the settings? I am having issues with some sensors on some servers and have been trying everything I find online. I am about to open a ticket, but wanted to give this a shot.
sophiavega I can't speak for anyone else, but we had a security policy GPO that limited what user accounts could log in as a service. By adding NT SERVICE/ALL SERVICES to that list of groups/users that were allowed to log in as a service, we were able to get the ATP sensor to start up.
- Thanks for that, worked like a charm!
marioschaupp Just wanted to let you know that I was experiencing the same issue, and your fix worked for me as well. Reintroducing the NT SERVICE/ALL SERVICES to the list of Log In as as Service allowed the ATP Sensor to run on mine as well.
Thanks!
