Jan 10, 2013 · I went down the path of investigating the Event ID 28005 issue that I originally reported and was led to this article, which talks vaguely about "group policy" and "log in as a service" permissions.