#define EVENT_SERVICE_LOGON_TYPE_NOT_GRANTED 0xC0001B81L
MessageId: EVENT_SERVICE_LOGON_TYPE_NOT_GRANTED MessageText: The %1 service was unable to log on as %2 with the currently configured password due to the following error: %nLogon failure: the user has not been granted the requested logon type at this computer.%n %nService: %1 %nDomain and account: %2%n %nThis service account does not have the necessary user right "Log on as a service."%n %nUser Action%n %nAssign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster.%n %nIf you have already assigned this user right to the service account, and the user right appears to be removed, a Group Policy object associated with this node might be removing the right. Check with your domain administrator to find out if this is happening.
Lanman Server Events (2000 - 2999)
2000-2499 are generated by the server driver (kernel mode)
2500-2999 are generated by the server service (user mode)
Server driver events, issued from kernel mode.
Values are 32 bit values laid out as follows:
3 3 2 2 2 2 2 2 2 2 2 2 1 1 1 1 1 1 1 1 1 1
1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
+---+-+-+-----------------------+-------------------------------+
|Sev|C|R| Facility | Code |
+---+-+-+-----------------------+-------------------------------+
where
Sev - is the severity code
00 - Success
01 - Informational
10 - Warning
11 - Error
C - is the Customer code flag
R - is a reserved bit
Facility - is the facility code
Code - is the facility's status code