Service Fails to start with log on problem

[John Downing]

I support a couple applications that use AD accounts to start services, including SQL. These Apps are installed at several hundred sites, plus many testing labs. Inconsistently, when a server is rebooted, one of the servies will fail to start with a log on problem. After refreshing the PW, you get a a message indicating the account has been granted log on as service User rights. In one of these apps there are 27 services. Whne the problem occurs, 99% of the time, it is only one service that fails to start. In this particular app, a Glbal Group and GPO with "log on as Service" and "Deny Logon locally" are used. I've seen this in both 2008r2 and 2003 r2 domains. Does anyone have an explanation as to what may cause this? It is driving me crazy, as it is seldom more than one of many services that have this issue on a reboot.