Click here to get back home

"Network Service" account is UNABLE to write to a network shared folder

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
"Network Service" account is UNABLE to write to a network shared folder Speech Lover 04-18-2007
Posted by Speech Lover on April 18, 2007, 7:01 pm
Please log in for more thread options
Hi,

A small WORKGROUP has two Windows Server 2003 servers - server A & server B.

I have installed an application on server A and by default it runs under the
account "Network Service".
This application writes files to a local directory without problems but when
I map a folder from server A to server B and use that mapped network folder,
it fails.

Note that on server B I have also granted full control permission to account
"Network Service".

What needs to be done to allow "Network Service" account to write to a
network shared folder?

thanks,
Speech Lover



Posted by Roger Abell [MVP] on April 19, 2007, 9:05 am
Please log in for more thread options
> Hi,
>
> A small WORKGROUP has two Windows Server 2003 servers - server A & server
> B.
>
> I have installed an application on server A and by default it runs under
> the account "Network Service".
> This application writes files to a local directory without problems but
> when I map a folder from server A to server B and use that mapped network
> folder, it fails.
>
> Note that on server B I have also granted full control permission to
> account "Network Service".
>
> What needs to be done to allow "Network Service" account to write to a
> network shared folder?
>
> thanks,
> Speech Lover

What you report is expected behavior.

The short answer to "what needs to be done" is form or
join a domain.

Network Service goes off box as the domain\computername$ account,
so the remote share needs to grant to that account, but that is in a domain,
which you are without.

Outside of an account there is no shared set of accounts.
Each machine knows only of its accounts and trusts no other
machine to authenticate accounts. So, the access has to be
by use of an account that the accessed machine knows and
can autheticate (or by use of Guest or anonymous access).




Posted by Joe Richards [MVP] on April 19, 2007, 11:35 am
Please log in for more thread options
> What needs to be done to allow "Network Service" account to write to a
> network shared folder?

Put the machines in a domain and grant rights to the computer's domain
account or create a null session share and relax the filesystem and
share security on the remote machine. This second option means the share
is open to the whole wide world that can access the machine over the
network.

As Roger indicated, just because the network service well known security
principal exists on every machine, it doesn't mean they can talk to each
other. It isn't like a normal user account with a synced password on
each of the machines.


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Speech Lover wrote:
> Hi,
>
> A small WORKGROUP has two Windows Server 2003 servers - server A & server B.
>
> I have installed an application on server A and by default it runs under the
> account "Network Service".
> This application writes files to a local directory without problems but when
> I map a folder from server A to server B and use that mapped network folder,
> it fails.
>
> Note that on server B I have also granted full control permission to account
> "Network Service".
>
> What needs to be done to allow "Network Service" account to write to a
> network shared folder?
>
> thanks,
> Speech Lover
>
>

Similar ThreadsPosted
Howto : programatically give NTAUTHORIRTY\Network Service account write permission on a directory August 4, 2005, 9:38 pm
'NT Authority\Network Service' Account July 26, 2005, 4:03 am
accessing HKCU of network service account December 21, 2005, 4:23 pm
Unable to create a Network Place to a DFS Link March 13, 2008, 5:19 pm
Suddenly Unable to connect to other machines on local network January 8, 2006, 5:45 pm
openCertStore() denied to Network Service September 19, 2007, 3:04 pm
Is NETWORK SERVICE Member of Users Group? March 12, 2007, 4:39 pm
Boot Volume NTFS Permissions for Network Service July 3, 2006, 10:45 pm
System Volume Information folder visable on network! August 2, 2006, 4:11 am
SCEP - Network Device Enrollment Service on Windows 2008 Standard March 31, 2008, 10:32 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap