Re: assigning rights to computer objects

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance




<alfrodull@xxxxxxxxx> wrote in message
news:d649961a-0fcd-4771-8ae1-2a0df4819faf@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a windows 2003 server on a domain. The server has a share and
I want to have scheduled tasks run on windows xp computer that right
to the share. The windows xp computers are also joined to the same
domain.

So I have:

c:\myshare shared as \\server\myshare

What I want to be able to do is setup the security and share
permissions so that scheduled tasks on client1 can write to that the
share. The scheduled tasks on client1 run as "NT AUTHORITY\SYSTEM"
and have to run whether someone is logged in or not.

I thought I could just assign write permissions to client1$ in both
the share and security permissions and then the system account on
client1 would be able to write to the share, but that's not working.

Is this possible, and if so, where have I gone wrong?

Thanks!

I would assign permissions to the NetBIOS name of the computer. Or, better
yet, you can assign permissions to the group "Domain Computers", which
should include all computers joined to the domain. If the NetBIOS name of
the computer is client1, assign permissions to that trustee. The
sAMAccountName would be client1$, but the trustee is:

MyDomain\client1

where MyDomain is the NetBIOS name of the domain.

--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--


.



Relevant Pages

  • assigning rights to computer objects
    ... I have a windows 2003 server on a domain. ... I want to have scheduled tasks run on windows xp computer that right ... The scheduled tasks on client1 run as "NT AUTHORITY\SYSTEM" ...
    (microsoft.public.windows.server.general)
  • RE: What server hardening are you doing these days?
    ... permissions on their data, and Microsoft encourages ISVs to minimize ... I've been able to discuss ACLs and other security issues in Windows with ... Control or DAC (which is what you're referring to by the "stupid ...
    (Focus-Microsoft)
  • Re: Unnown process... 5eplorer.exe
    ... do not remove the cause (a "super"-hidden .dll program) but only remove ... symptom files and registry settings. ... It has all permissions but 'copy' denied to everyone, ... then by using the Windows XP Recovery Console. ...
    (microsoft.public.win2000.general)
  • RE: dcom permissions and vista?
    ... user BLAH with Local Activation and Local Launch permissions. ... Windows Vista indeed do some changes in handling DCOM and you may need to ... Windows Vista introduces the notion of Mandatory Access Labels in security ... Microsoft Online Community Support ...
    (microsoft.public.vc.atl)
  • Re: OT: Win 7 comments
    ... I had to edit the Registry. ... This is right up there with repairing permissions, ... That's odd, consider how some of you guys bring the same habits to Windows, ... I will wait for some apps to crash. ...
    (comp.sys.mac.advocacy)