IBM Support

Error 1314 Starting Remote Command Service

Troubleshooting


Problem

Error 1314 - "A required privilege is not held by the client" may be encountered when an attempt is made to start a service on Microsoft Windows XP, 7, 8.1 or Windows server 2008 or 2012. This document describes the cause of the error and includes directions for setting up user accounts so that the error is not generated.

Cause

Error 1314 - A required privilege is not held by the client might be encountered in Microsoft Windows XP, 7, 8.1 or Windows server 2008 or 2012 when starting the IBM i Access for Windows Remote Command Service.

This error is typically encountered when the service has been configured to log on as a specific account rather than the system account. To start correctly as a specific account, that account must hold the following rights:

oAct as part of the operating system
oIncrease quotas (not required for Windows XP clients)
oLog on as a service (see note)
oReplace process level token
All other rights are held by any account that was part of the default Users group. An account that is part of the Administrator's group, by default, has all of the rights above except the Log on as a service right. The User Manager tool can be used to grant the account these rights so the account can be used.

To add these rights for Windows computers that are not part of a domain, do one of the following:

o Open a Windows 'Run' prompt and run secpol.msc

o Go to the Windows toolbar and click Start > Control Panel > Administrative Tools > Local Security Policy.

Next, expand Local Policies and select User Rights Assignment, then take the following steps for each right that must be added (using 'Log on as a Service' as an example):

1Locate Log on as a Service and double-left-click it to open the Log on as a service Properties window.
2Click on the Add User or Group button.
3Click on the Object Types button.
4On the Object Types window, select Users. Deselect any other option. Click on the OK button.
5On the Select Users or Groups window, click on the Advanced button.
6On the resulting window, click on the Find Now button. This will return a list of PC users.
7Select the user that you want to give the right to, and click the OK button.
8On the next window, click the OK button.
9You should be back on the Log on as a service Properties window and displaying the Local Security Setting tab.
10The user that was given the Log on as a service right should be displayed as COMPUTER_NAME\User_Name.
11Click on the Apply button and then the OK button.
12This takes you back to the Local Security Settings window.
13Repeat the steps for Act as part of the operating system and Replace process level token.

To add these rights for computers that are part of a Domain:

The policy that is being enforced on the computer must be edited. Once the policy is edited, the server must be restarted for the changes to take effect. Refer to the 'NOTE' in Microsoft Article 272587 or contact your domain administrator or Microsoft for additional assistance.

Note: The Local System Account should (by default) have all of the required rights. If it does not, it can be given rights in the same manner that they are given to user accounts. To do so, follow the steps above. Select SYSTEM from the Select Users or Groups screen as shown below:

Under Log on as a Service, open Log on as a service Properties window, select your user or group and ensure they have SYSTEM rights.

Note: These steps are used to give Microsoft Windows users the necessary rights to start a service. IBM i Global Support Center does not provide support for setting Microsoft Security. These steps are provided as a courtesy only. If additional assistance is required, contact Microsoft Support.

[{"Product":{"code":"SWG60","label":"IBM i"},"Business Unit":{"code":"BU009","label":"Systems - Cognitive"},"Component":"Data Access","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"Version Independent","Edition":""},{"Product":{"code":"SSC52E","label":"IBM i 7.1"},"Business Unit":{"code":"BU009","label":"Systems - Server"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":""},{"Product":{"code":"SSC3X7","label":"IBM i 6.1"},"Business Unit":{"code":"BU009","label":"Systems - Server"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":""},{"Product":{"code":"SSTS2D","label":"IBM i 7.3"},"Business Unit":{"code":"BU009","label":"Systems - Server"},"Component":" ","Platform":[{"code":"","label":null}],"Version":"","Edition":""},{"Product":{"code":"SSC5L9","label":"IBM i 7.2"},"Business Unit":{"code":"BU009","label":"Systems - Server"},"Component":" ","Platform":[{"code":"","label":null}],"Version":"","Edition":""}]

Document Information

Modified date:
18 December 2019

UID

nas8N1019929