The account cannot be granted a privilege to "log on as service" on the domain controller. The domain security administrator ...

The account cannot be granted a privilege to "log on as service"" on the domain controller.  The domain security administrator needs to grant the default account this privilege.  All of the default accounts specified for the server need this account privilege.