9

We have services running under IIS with pool setup to run under NetworkService identity. If the service required access to a shared folder on a remote server, on previous versions of WinServer we just added the "ServerA$" account to the list of user permission of the share.

Now, in Windows Server 2012 (R2, probably some previous versions as well) the computer account is no longer selectable in the object type window when searching for the user:

Shared folder - object types when selecting permission
(There used to be "Computers" checkbox here)

Now, how do we allow access to a shared folder on ServerB to a process running under NetworkService Identity on ServerA?

2
  • Are you trying to give "normal" SMB Share rights on your share? I looked on my Windows Server 2012R2 Server and checked the Filerightes of and folder. On my system i can select Computers and serviceaccounts...
    – frupfrup
    May 7 '15 at 12:16
  • (sorry for this step-by-step, I want to make sure we're on the same page) - Right click folder, choose "Share with" -> "Specific people", choose "Find people", on the popup click the "Object types" - there's no computers account here...
    – veljkoz
    May 7 '15 at 12:37
4
+50

You need to use advanced sharing for this, go to
Properties
Sharing Tab
Advanced Sharing
Tick 'Share this Folder'
Click Permissions
Click Add
Click Object Types

The computer object will be shown in the list of available objects

enter image description here

1

you have to go to properties --> sharing --> advanced shareing. There you can choose the computer under the "object types".

But i would prevere to set the share to "everyone" and then change the rights over the NTFS-User rights. So you only have to manage the rights on one side...

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.