Access from Local System Account to shares – How to?

[Guest sp]

I have a service that log on as Local System Account but I need access

(from that service) to shares on other computer.

 

How to set share (I know that it will but not to secure, but I really

need it)?

[Guest Meinolf Weber]

Re: Access from Local System Account to shares - How to?

 

Re: Access from Local System Account to shares - How to?

 

Hello SP,

 

For services create always a domain user account with the lowest privileges

you need, also this account can be then configured to access other resources

over the security tab.

Think it will be not possible to connect with Local system of a machine to

other machines, because you have no access and can not control the password.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I have a service that log on as Local System Account but I need access

> (from that service) to shares on other computer.

>

> How to set share (I know that it will but not to secure, but I really

> need it)?

>

[Guest Pegasus \(MVP\)]

Re: Access from Local System Account to shares - How to?

 

Re: Access from Local System Account to shares - How to?

 

 

"sp" <kofa@noemail.noemail> wrote in message

news:etlb0pXuIHA.516@TK2MSFTNGP04.phx.gbl...

>I have a service that log on as Local System Account but I need access

>(from that service) to shares on other computer.

>

> How to set share (I know that it will but not to secure, but I really need

> it)?

 

You will have to run your service under an account other than

the System account.

[Guest Anthony [MVP]]

Re: Access from Local System Account to shares - How to?

 

Re: Access from Local System Account to shares - How to?

 

You can do it in two ways:

- on the remote server, you can add the computer account to a local group

and add that to the share permissions: net localgroup [group]

[domain]\[computer]$ /add

- in Windows 2003 you can add the computer directly as a security principal.

By default when you select an object to add, the object type does not

include Computers, but you can change it and then add the computer account.

Hope that helps,

Anthony

http://www.airdesk.co.uk

 

 

 

"sp" <kofa@noemail.noemail> wrote in message

news:etlb0pXuIHA.516@TK2MSFTNGP04.phx.gbl...

>I have a service that log on as Local System Account but I need access

>(from that service) to shares on other computer.

>

> How to set share (I know that it will but not to secure, but I really need

> it)?

[Guest sp]

Re: Access from Local System Account to shares - How to?

 

Re: Access from Local System Account to shares - How to?

 

Anthony [MVP] pisze:

> You can do it in two ways:

> - on the remote server, you can add the computer account to a local group

> and add that to the share permissions: net localgroup [group]

> [domain]\[computer]$ /add

 

but the computer that serve the shares is not connected to the domain.

 

When I try to do it I receive:

 

There is no such global user or group: MYDOMAIN\APPSERV$.

 

More help is available by typing NET HELPMSG 3783.

 

 

> - in Windows 2003 you can add the computer directly as a security principal.

> By default when you select an object to add, the object type does not

> include Computers, but you can change it and then add the computer account.

> Hope that helps,

> Anthony

> http://www.airdesk.co.uk

>

>

>

> "sp" <kofa@noemail.noemail> wrote in message

> news:etlb0pXuIHA.516@TK2MSFTNGP04.phx.gbl...

>> I have a service that log on as Local System Account but I need access

>> (from that service) to shares on other computer.

>>

>> How to set share (I know that it will but not to secure, but I really need

>> it)?

>

>

[Guest Anthony [MVP]]

Re: Access from Local System Account to shares - How to?

 

Re: Access from Local System Account to shares - How to?

 

Then my suggestion won't work I'm afraid.

Anthony,

http://www.airdesk.co.uk

 

 

"sp" <kofa@noemail.noemail> wrote in message

news:uL9agCsuIHA.4876@TK2MSFTNGP02.phx.gbl...

> Anthony [MVP] pisze:

>> You can do it in two ways:

>> - on the remote server, you can add the computer account to a local group

>> and add that to the share permissions: net localgroup [group]

>> [domain]\[computer]$ /add

>

> but the computer that serve the shares is not connected to the domain.

>

> When I try to do it I receive:

>

> There is no such global user or group: MYDOMAIN\APPSERV$.

>

> More help is available by typing NET HELPMSG 3783.

>

>

>

>> - in Windows 2003 you can add the computer directly as a security

>> principal. By default when you select an object to add, the object type

>> does not include Computers, but you can change it and then add the

>> computer account.

>> Hope that helps,

>> Anthony

>> http://www.airdesk.co.uk

>>

>>

>>

>> "sp" <kofa@noemail.noemail> wrote in message

>> news:etlb0pXuIHA.516@TK2MSFTNGP04.phx.gbl...

>>> I have a service that log on as Local System Account but I need access

>>> (from that service) to shares on other computer.

>>>

>>> How to set share (I know that it will but not to secure, but I really

>>> need it)?

>>