The account which runs the service has to have domain admin permissions in the domain so a local system or network system account wouldn't work as you see. In regards to the logon failure that literally means that the account entered cannot authenticate locally. Failed logons typically generate a security event locally with the reason if the appropriate auditing is configured but I would advise trying again or isolating with different domain accounts.