raul needs to add the new service account to the list of users in the “act as part of the operating system” default domain group policy