Machine account / NTFS permissions

[TigerDragonUK]

Hi all,

I have two Windows 2003 servers and need to give the NETWORK SERVICE account from Server1 NTFS permissions over a folder on Server2, and vice versa.

Can anyone suggest a way I can do this?

The obvious problem I'm encountering is that when adding a new account to the list of accounts in the Security window, I am only able to add an account from the domain or on the server itself - it will not recognise a local account from another server ...i.e. when on server2, it won't allow me to add 'server1\NETWORK SERVICE'.

Thanks!

 

[Alshrim]

That is correct.. you cannot pull local account across the network...

Network (SERVICE) accounts are local..

My suggestion is ... whatever application you need to run - associate its service with a Domain-Level Service account.

Create the account.. and add it as the account that will start the service in question (effectively replacing Network Service)...

That way - whatever remote resource you need to access can bee applied network perms ...

if this is for backups .. then ... i could suggest something else..

Use Group Policies.. and grant implicite backup rights for Network Services...

In any case .. hope it was helpful.

AlRo
System Administrator
Ottawa, Canada.

 

[Alshrim]

I'm looking back.. i may have misread something.

Could you describe what you wanna do?!

AlRo
System Administrator
Ottawa, Canada.

 

[TigerDragonUK]

No it's ok AlRo, you've understood my goal correctly ...I have tried to resolve this in the same way you've described - by creating an account in the domain with the same level of privileges and necessary persmissions as the NETWORK SERVICE account.

...I am now just waiting for the customer to feedback to me as to whether or not this has worked for him.

Many thanks for your reply!

 

[Alshrim]

glad i could help

AlRo
System Administrator
Ottawa, Canada.