The user must be granted the 'Log on as a service' privilege. This can be done with the 'Local Security Policy' administrative ...