#WindowsCouldnotstart #Error1297
a privilege that the service requires to function properly does not exist in the service account
To sort this issue i did following
Login to Domain Controller PC
Open Group policy editor (or run gpedit.msc from RUN) and edit default domain policy (or any other custom policy you may have other then default)
Goto Computer or USER Configuration - Policies Windows Settings-Security Settings -Local Policies - User Rights Assignment -Profile system performance
There you may see only ADMINISTRATOR user added by default, now add following users
LOCAL SERVICE
NT Service\WdiServiceHost