AnsweredAssumed Answered

ERROR 1923: "Verify that you have sufficient privileges to install system services" when installing software that creates a service.

Question asked by Scott Olswold on Dec 12, 2016


When installing software that creates a service, the "Error 1923" message "Verify that you have sufficient privileges to install system services" displays, normally with "Abort, Retry, Ignore" options. The screenshot below is an example:


The service is being installed and a user account (local or domain) is being specified as the "Logon" account.



Generally, a special account is used for services' logons:

  • LocalSystem
  • LocalService
  • NetworkService

and by default, these special accounts are already provided with the "Logon as Service" privilege by the Windows operating system. However, it is also possible, depending on the installation wizard, to specify a local or domain user account as the "logon" privilege instead. In order to do this, however, it is generally required that the user account be added to the local Group Policy first, or the installation will fail with this message.



Referencing the Microsoft document Add the Log on as a service Right to an Account , follow the steps below:


  1. Click Start, point to Run, type mmc, and then click OK.
  2. On the File menu, click Add/Remove Snap-in.
  3. In Add/Remove Snap-in, click Add, and then, in Add Standalone Snap-in, double-click Group Policy Object Editor.
  4. In Group Policy Object, click Browse, browse to the Group Policy object (GPO) that you want to modify, click OK, and then click Finish.
  5. Click Close, and then click OK.
  6. In the console tree, expand GroupPolicyObject [ComputerName] Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies  > User Rights Assignment.
  7. In the details pane, find and double-click "Log on as a service."
  8. If the security setting has not yet been defined, select the Define these policy settings check box.
  9. Click Add User or Group, and then add the appropriate account to the list of accounts that possess the Log on as a service right.


When finished, close out of the Group Policy Object editor and refresh the local group policy on the server by running gpupdate /force in an administrative command prompt.