Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Thursday, November 7, 2019 5:19 PM
Afternoon,
I have a scheduled task on server A that copies a file from server A to a share on server B. The scheduled task on server A runs under SYSTEM.
If i add everyone with full control to the share and security permissions on server B, the file copies over successfully, when the scheduled task is run. If i remove everyone and and give various different accounts permission to the share and security, the file fails to copy over.
I don't want to assign everyone full control to the share and security, what account do i need to give permissions to the share and security in order for the file to copy successfully ?
Thanks,
All replies (6)
Thursday, November 7, 2019 6:01 PM
Hi,
you need to assign the machine account of Server A at least Write permissions on both the share and the shared folder (NTFS).
Evgenij Smirnov
Friday, November 8, 2019 6:09 AM
Hi,
If you use a local path for the destination folder, assign permission as following:
share permission: both for the destination and source folder, give everyone the read permission.
NTFS :for source folder give everyone the following permission
On the destination folder, for NTFS ,need the following permission:
If you use a UNC path for the destination folder, need to assign everyone the full control of the share permission to destination folder. Others the same with above.Best Regards,
Fan
Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact [email protected]
Friday, November 8, 2019 3:50 PM
Thanks.
That works, but if i add the machine account of Server A to a security group and give write permissions on the shared folder (NTFS) to the security group, instead of adding Server A machine account on its own, the copy fails.
Why is that ? I need to allow many server machine accounts to copy files to the share on server B and don't want to add them all individually to the share security (NTFS).
Friday, November 8, 2019 4:32 PM
Because you need to either reboot Server A or do
klist -li 0x3e7 purge
with elevated rights on Server A so that the new group membership is contained in its Kerberos token.
Or wait for (worst case with default settings) 10 hours ;-)
Evgenij Smirnov
Saturday, November 9, 2019 12:56 AM
I need to allow many server machine accounts to copy files to the share on server B and don't want to add them all individually to the share security (NTFS).
Create a user account in Active Directory to be used for this purpose. Then modify the scheduled task on all servers to run as that account. Grant that one account access on server B.
Tuesday, November 12, 2019 9:58 AM
Hi,
Welcome to share your current situation.
Please feel free to let us know if you need further assistance.
Best Regards,
Fan
Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact [email protected]