When installing/upgrading to vCenter 6.5 you may find that not all services start. This can be due to when installing/upgrading, additional local accounts are created by the installer and added to the local security policy as logon as a batch job. If you have a GPO overriding the local system policy, these services will fail to start.

To fix this you need to create these accounts:

Policy : Computer Configuration -> Windows Settings ->Security Settings ->Local Policies -> User Rights Assignment ->Log on as a batch job

Accounts:
cm
content-library
eam
imagebuilder
mbcs
netdumper
perfcharts
rbd
vapiEndpoint
vmware-vpostgres
vsan-health
vsm
vsphere-client
vsphere-ui