A privilege that the service requires to function properly does not exist in the service account configuration. You may use the Services Microsoft Management Console (MMC) snap-in (services.msc) and the Local Security Settings MMC snap-in (secpol.msc) to view the service configuration and the account configuration.

Several possibilities are found on the internet, but the below helped me.

You must edit group policy settings... edit Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assingment -> Profile system performance ... Check Define these settings and add Administrators and LOCAL SERVICE. The second user is based on the "Log On" account for the "Diagnostic Service Host"