Re: Local System account and network resource access

As I said, the System account has no access to shared resources.
If it had access then this would open a nice can of works, e.g.
issues with passwords and issues with accessing shares on
other computers for which you have no access privileges.

If you explain what you're actually trying to do then someone
may offer a solution that does not involve the System account.


"ykffc" <ykffc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BAA7BC71-B14E-46BD-B419-20756439A43E@xxxxxxxxxxxxxxxx
<quote> The local System account cannot access any networked resources.
This is by design. </quote>

Is there are exceptions? When we define a share in machine1, I thought we
can if delete all users in the permission list but add a machine name
(domanName\machine2$) in the permission list, that would mean I allow this
share to be accessable by ANY users ( including a local system user ) as
long
as the user sits on machine2.




"Pegasus (MVP)" wrote:


"ykffc" <ykffc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F79F2FCE-8AB4-4AEC-BC41-0E534BDAE37B@xxxxxxxxxxxxxxxx
Does anyone know whether the system account NT AUTHORITY/SYSTEM is able
to
access network resource like ordinary authenticated user?

According to my research it appears it should be able. I have tried it
but
it always give me an "Access denied" error message. I simply try to do
a
"dir
\\xxx.xx.xx.xx\shareName" command.

Everything works for me with what was described in the following link
(except I can't access network resource).
http://security.fnal.gov/cookbook/LocalSystem.html


No. The local System account cannot access any networked resources.
This is by design.





.

Relevant Pages

  • Re: Programs that require full read/write
    ... If you launch the same program ... under the Task Scheduler then access is determined by the account ... resources for which the System account has access. ...
    (microsoft.public.windows.server.general)
  • Re: adding scheduled task error
    ... causing this please? ... System account, which has no access to networked ... resources. ... Jobs scheduled with the Task Scheduler ...
    (microsoft.public.windows.server.general)
  • Re: Xp home to Domains at schools
    ... To access network resources, ... a username and password, ... Note that you may have problems with Domain DFS roots, ...
    (microsoft.public.windowsxp.work_remotely)
  • Service
    ... The service is running in local system account & it also create the ... In process i have to access network resource. ... In Windows 2000 new process is working fine but in Windows XP it does't ...
    (microsoft.public.dotnet.general)
  • RE: Win2K not seeing other machines
    ... I understand that with a win2k pro client, you can access network ... resources, but not see other computers in the My Network places window. ... The Win2k pro machine will not show up in the available comuters from ...
    (microsoft.public.windows.server.sbs)
Loading