Access from Local System Account to shares – How to?

[sp]

I have a service that log on as Local System Account but I need access
(from that service) to shares on other computer.

How to set share (I know that it will but not to secure, but I really
need it)?

[Meinolf Weber]

Hello SP,

For services create always a domain user account with the lowest privileges
you need, also this account can be then configured to access other resources
over the security tab.
Think it will be not possible to connect with Local system of a machine to
other machines, because you have no access and can not control the password.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I have a service that log on as Local System Account but I need access
> (from that service) to shares on other computer.
>
> How to set share (I know that it will but not to secure, but I really
> need it)?
>

[Pegasus \(MVP\)]

"sp" <kofa@noemail.noemail> wrote in message
news:etlb0pXuIHA.516@TK2MSFTNGP04.phx.gbl...
>I have a service that log on as Local System Account but I need access
>(from that service) to shares on other computer.
>
> How to set share (I know that it will but not to secure, but I really need
> it)?

You will have to run your service under an account other than
the System account.

[Anthony [MVP]]

You can do it in two ways:
- on the remote server, you can add the computer account to a local group
and add that to the share permissions: net localgroup [group]
[domain]\[computer]$ /add
- in Windows 2003 you can add the computer directly as a security principal.
By default when you select an object to add, the object type does not
include Computers, but you can change it and then add the computer account.
Hope that helps,
Anthony
http://www.airdesk.co.uk



"sp" <kofa@noemail.noemail> wrote in message
news:etlb0pXuIHA.516@TK2MSFTNGP04.phx.gbl...
>I have a service that log on as Local System Account but I need access
>(from that service) to shares on other computer.
>
> How to set share (I know that it will but not to secure, but I really need
> it)?

[sp]

Anthony [MVP] pisze:
> You can do it in two ways:
> - on the remote server, you can add the computer account to a local group
> and add that to the share permissions: net localgroup [group]
> [domain]\[computer]$ /add

but the computer that serve the shares is not connected to the domain.

When I try to do it I receive:

There is no such global user or group: MYDOMAIN\APPSERV$.

More help is available by typing NET HELPMSG 3783.



> - in Windows 2003 you can add the computer directly as a security principal.
> By default when you select an object to add, the object type does not
> include Computers, but you can change it and then add the computer account.
> Hope that helps,
> Anthony
> http://www.airdesk.co.uk
>
>
>
> "sp" <kofa@noemail.noemail> wrote in message
> news:etlb0pXuIHA.516@TK2MSFTNGP04.phx.gbl...
>> I have a service that log on as Local System Account but I need access
>> (from that service) to shares on other computer.
>>
>> How to set share (I know that it will but not to secure, but I really need
>> it)?
>
>

[Anthony [MVP]]

Then my suggestion won't work I'm afraid.
Anthony,
http://www.airdesk.co.uk


"sp" <kofa@noemail.noemail> wrote in message
news:uL9agCsuIHA.4876@TK2MSFTNGP02.phx.gbl...
> Anthony [MVP] pisze:
>> You can do it in two ways:
>> - on the remote server, you can add the computer account to a local group
>> and add that to the share permissions: net localgroup [group]
>> [domain]\[computer]$ /add
>
> but the computer that serve the shares is not connected to the domain.
>
> When I try to do it I receive:
>
> There is no such global user or group: MYDOMAIN\APPSERV$.
>
> More help is available by typing NET HELPMSG 3783.
>
>
>
>> - in Windows 2003 you can add the computer directly as a security
>> principal. By default when you select an object to add, the object type
>> does not include Computers, but you can change it and then add the
>> computer account.
>> Hope that helps,
>> Anthony
>> http://www.airdesk.co.uk
>>
>>
>>
>> "sp" <kofa@noemail.noemail> wrote in message
>> news:etlb0pXuIHA.516@TK2MSFTNGP04.phx.gbl...
>>> I have a service that log on as Local System Account but I need access
>>> (from that service) to shares on other computer.
>>>
>>> How to set share (I know that it will but not to secure, but I really
>>> need it)?
>>