Windows box (2k3). I have a website that needs to access files over a network share on the local machine. Please don't concentrate on this fact. Its a long story I won't go into now.
The worker process is running under localmachine\NETWORK SERVICE. This was added to a group (lets call it the HURFDURFGROUP) which was granted access both to the disk and to the network share.
In other words, if I was a member of HURFDURFGROUP I could log onto the share and open files contained there.
However, even though NETWORK SERVICE was a member of this group, NETWORK SERVICE was not able to access the network share. Attempts to read files would result in a FileNotFound and attempts to alter security of files on the share resulted in a UnauthorizedAccess.
The odd thing is, once I specifically set NETWORK SERVICE's permissions on the disk and the share everything worked.
This leads me to believe you cannot use Groups to assign or deny rights to NETWORK SERVICE.
Is this correct? Could somebody explain this?