Windows 2012R2 and later, Network Service has to be added to the logon as service right in local security permissions or via GPO. Your test environment probably worked just fine because it wasn't ...