CSACS servcies fail to start when using domain user account

[itdojo]

I have installed CSACS 3.3 on a member server in a Windows 2003 domain. The member server is running Server 2003, too.

I created a user account in Active Directory and configured the CSACS services to log on as this account. Through Group Policy I granted the user the "log on as a service" and "act as part of the operating system" privileges per the Installation Guide for Cisco Secure ACS for Windows. I verefied that the policy has taken affect on the CSACS server.

The CSACS services fail to start as this user account. The error messages are non-specific. If I add the user to the local administrators group the services start just fine.

Anybody know what I might be missing?

Thanks in advance.

Colin

[itdojo]

Correction: The CSLog service does start when configured to run as the domain user account. All other services fail.

[jsailers]

Did you ever figure this out? I'm running into the exact same problem. Same version of ACS and everthing. CSLog is the only service that started.