343 reputation
1514
bio website
location
age
visits member for 5 years
seen 2 days ago

Jul
2
awarded  Curious
Jun
30
awarded  Notable Question
Apr
4
awarded  Popular Question
Jan
24
revised What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?
Hedging about IIS Application Pool Identities
Jan
24
revised What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?
Oops -- I'd left in a duplicate paragraph
Jan
24
comment What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?
@RyanRies I've generalized my question, because I saw I didn't really understand Everyone as a whole either. If you want to post an official "answer" that shares your helpful insights, feel free!
Jan
24
revised What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?
added 32 characters in body
Jan
24
revised What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?
Generalize the Q, because I can't find a good answer to the more generalized Q either
Jan
24
comment What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?
@RyanRies It might be that the ordinary English word "everyone" only applies to people, leaving me without an intuition as to how the particularly "computer-ish" concept of machine accounts would be handled. In addition I found it counter-intuitive that the anonymous identifier was not part of "everyone" -- so I became curious about other potential subtleties.
Jan
23
asked What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?
Jan
23
answered What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?
Oct
17
awarded  Popular Question
Apr
17
comment What does it mean to grant/set permissions for NETWORK SERVICE on a network share?
@HarryJohnston Nice clarification that the access would be granted to NETWORK SERVICE contexts on MyFileServer, rather than NETWORK SERVICE contexts on MachineA. (And also that it doesn't matter from which machine you set the permissions.) Thanks.
Apr
9
accepted What does it mean to grant/set permissions for NETWORK SERVICE on a network share?
Apr
9
comment What does it mean to grant/set permissions for NETWORK SERVICE on a network share?
To give an example that's hopefully correct: Say I'm on MYDOMAIN\MachineA and I navigate to \\MyFileServer\MyShare using Windows Explorer. Initially MyShare is read-only for everyone except Administrator. From MachineA I change the permissions of MyShare, granting write access to NETWORK SERVICE. What this actually does is give write permissions to the MYDOMAIN\MachineA$ account. Therefore, MachineA's NETWORK SERVICE can write to MyShare, but MachineB's (or MachineC's or ...) NETWORK SERVICE account can't write to MyShare.
Mar
24
comment What does it mean to grant/set permissions for NETWORK SERVICE on a network share?
The title of the post is the question. But to to more specific, there's this thing that is possible (give permissions for something to NETWORK SERVICE), and the question is what that does, given that NETWORK SERVICE is a special account. I didn't have something in particular I was trying to accomplish; I was just curious if it might help me accomplish something in the future.
Mar
23
asked What does it mean to grant/set permissions for NETWORK SERVICE on a network share?
Mar
6
awarded  Nice Question
Jan
23
awarded  Yearling
Oct
26
awarded  Notable Question