Access Denied in Local System Account Service
-
Hello all, I have an application which access files on network share, Now the requirement is that instead of application a service should access the files on network share and the service must be running on "LOCAL SYSTEM ACCOUNT", I guess it's pretty easy when make service as NetworkService Account to access files on network, But the requirement is to make service on "LOCAL SYSTEM ACCOUNT" only. Further research tells me that i need to setup a "null session share" if LSA needs to access network, So i did that with some help from This Page, But It always gives me access denied. Any help will be appreciated.. Thanks..
-
Hello all, I have an application which access files on network share, Now the requirement is that instead of application a service should access the files on network share and the service must be running on "LOCAL SYSTEM ACCOUNT", I guess it's pretty easy when make service as NetworkService Account to access files on network, But the requirement is to make service on "LOCAL SYSTEM ACCOUNT" only. Further research tells me that i need to setup a "null session share" if LSA needs to access network, So i did that with some help from This Page, But It always gives me access denied. Any help will be appreciated.. Thanks..
The trick to allowing the LocalSystem account access to network resources like file shares is that both machines must be part of the same domain, the computer account for the machine the service is running on must be given explicit rights to the file share and the folder, and you must use a resolvable name instead of the IP address in the path. Other Useful Information[^]
-
The trick to allowing the LocalSystem account access to network resources like file shares is that both machines must be part of the same domain, the computer account for the machine the service is running on must be given explicit rights to the file share and the folder, and you must use a resolvable name instead of the IP address in the path. Other Useful Information[^]
Hi bob, Thanks for the reply, Yes both the computers on same domain, How do i make sure that that machine which is running service is given explicit rights to the file share and the folder? And do you mean the computer name by resolvable name?
-
Hi bob, Thanks for the reply, Yes both the computers on same domain, How do i make sure that that machine which is running service is given explicit rights to the file share and the folder? And do you mean the computer name by resolvable name?
Yes the computer name is what I meant. I just wasn't sure if an alias is allowed so I worded it carefully. In regards to setting up rights, on the machine that is sharing the resource, you would normally right click on the folder you are sharing and on the "Sharing" and "Security" property pages, you would give the "Computer" that the service will be running on appropriate rights to the resource. Local System acts as the computer on the network. Be advised...there are some security implications to consider here but I'm guessing you've already weighed the risks.
-
Yes the computer name is what I meant. I just wasn't sure if an alias is allowed so I worded it carefully. In regards to setting up rights, on the machine that is sharing the resource, you would normally right click on the folder you are sharing and on the "Sharing" and "Security" property pages, you would give the "Computer" that the service will be running on appropriate rights to the resource. Local System acts as the computer on the network. Be advised...there are some security implications to consider here but I'm guessing you've already weighed the risks.
Hello bob, Yes i gave all the rights to computer but still access denied is coming, Let me explain the scenario again, The service is running on windows XP, The file is in windows server 2003, both are on same domain, By right clicking and sharing security of shared folder i gave all the possible rights to XP machine, But whenever the service(on XP) tries to copy it gives me access denied.. Am i missing any more setting here? Thanks
-
Hello bob, Yes i gave all the rights to computer but still access denied is coming, Let me explain the scenario again, The service is running on windows XP, The file is in windows server 2003, both are on same domain, By right clicking and sharing security of shared folder i gave all the possible rights to XP machine, But whenever the service(on XP) tries to copy it gives me access denied.. Am i missing any more setting here? Thanks