Click here to get back home

Problem with Domain Computer account

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Problem with Domain Computer account Mr.B 12-18-2006
Posted by Mr.B on December 18, 2006, 2:46 pm
Please log in for more thread options
I use log on script that copy one file from cluster share to local computer.

These is first time that I stumbled with access deny error. At other
customers a did not hat that kind of error.

Permissions on share is Domain computer , and Authenticated user and
Everyone Full control. Same is on security permissions, and I check on file
that Domain computer has full control included file that it copy

A did not change anything on AD, when I implemented solution. But at these
customer, they have high security environment, and they probably change
something on cluster. I thing that, because domain admin, does not have
permission to manage cluster, so thay probably change something. I can
differently implement script, but, I would like to make it work as computer
log on screen.

Script work, if I run it as administrator, I did not cachet it if it run as
regular users, because it copy files on Windows\system32 directory, and user
does not have permissions to write there.



On computer I set up domain computer to have full control under windows
directory, but no help. Problem is on file share on cluster.



Posted by Roger Abell [MVP] on December 19, 2006, 1:12 am
Please log in for more thread options
Hi B,

Some of your post I could not follow too well.
You say this is happening, rather failing to happen,
when started by login script.

In general there are only three or so things that
can go wrong.
1) does the account (that logged in) have permission
to the remote file (share and ntfs levels)
Note: for login access is as the user, so grants to
Domain Computers group is not needed
2) does the account have permissions to write a new
or modified copy to where it attempts to copy file
3) is networking working so that remote share is
available for the copy

I would not have the shared file/folder/share set as
you have described - with Everyone Full, as that is
asking for problems. Authenticated Users (which
effectively includes Domain Computers although as
said this is not needed) should be enough when set
to Read if all that is happening is a copy.
>I use log on script that copy one file from cluster share to local
>computer.
>
> These is first time that I stumbled with access deny error. At other
> customers a did not hat that kind of error.
>
> Permissions on share is Domain computer , and Authenticated user and
> Everyone Full control. Same is on security permissions, and I check on
> file that Domain computer has full control included file that it copy
>
> A did not change anything on AD, when I implemented solution. But at these
> customer, they have high security environment, and they probably change
> something on cluster. I thing that, because domain admin, does not have
> permission to manage cluster, so thay probably change something. I can
> differently implement script, but, I would like to make it work as
> computer log on screen.
>
> Script work, if I run it as administrator, I did not cachet it if it run
> as regular users, because it copy files on Windows\system32 directory, and
> user does not have permissions to write there.
>
>
>
> On computer I set up domain computer to have full control under windows
> directory, but no help. Problem is on file share on cluster.
>
>



Similar ThreadsPosted
PCs still function on domain with computer account disabled June 14, 2006, 3:51 pm
badPasswordTime for computer account April 5, 2006, 12:39 pm
DOMAINSEND computer account August 10, 2007, 12:37 pm
Computer Account Password November 6, 2007, 5:30 am
domain access control for local user of domain computer? April 3, 2008, 5:14 pm
Adding Computer account to folder security March 20, 2006, 9:19 am
Computer Account Changed, by NT AUTHORITY\ANONYMOUS LOGON?! July 3, 2006, 1:48 pm
Account lock out when accessing computer management remotely September 27, 2006, 11:32 am
Excessive computer account logon/logoff loggining on security log September 12, 2006, 5:23 am
Non-Domain computer access September 6, 2005, 3:47 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap