For some kind of reason, because the service is created from ASP.NET, there is some kind of setting that we do not see in the Services interface. When sc creates from ASP.NET it seems to bind something which forces us to add the account into "Act as part of the operating system". With that, it works. Very undocumented action we have to do.