Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have 2 pcs running win2k8 in a network without domain, and i have a windows service in pc1 that runs under the account system and this service writes come files in pc2 network share. If they were in a domain i could solve it easily but as they aren't i only can manage to have pc1 writing in pc2 if "everyone" permisions is set.

Can you please help me on this? Security wise is very importante only pc1 has access to pc2

Thank you very much!

Br, byte_slave

share|improve this question
up vote 1 down vote accepted

Make a new account on both machines - same name, same password. Run the service on pc1 as that account, and share the folder on pc2 with full rights given to that account, both on the share and the NTFS permissions.

share|improve this answer
It works like that out of the box? I thought the SID of the account is what really makes permissions be valid and assure accounts integrity not the name. Anyways i will try that and i give feedbaxk! – byte_slave Mar 2 '10 at 16:11
The stuff about SIDs is valid for machines in a domain. Your machines are not in domains. I do this all the time for application-tier servers in a DMZ. They're non-domain, so I make sure that the service account names and passwords are identical, and then have scheduled-task copy jobs that keep config files in sync between them. – mfinni Mar 2 '10 at 17:20
Thanks for the input! Very helpfull – byte_slave Mar 2 '10 at 20:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.