To install a portable software package, I'm using a scheduled task that runs on user logon to copy a folder from a network share to the local computer using robocopy.

If I'm not mistaken, in order to access the network share, this needs to run under the user context. However, this means the folder created on the local machine is also owned by that user. This allows the user to modify these files on the local machine, which is what I want to avoid. Ideally, I want to folder to be only readable/writeable by SYSTEM.

How can this be achieved?


You could grant the machine account of the workstation (DOMAIN\HOSTNAME$) or the Domain Computers group access to the network share. Then you would be able to run the script as SYSTEM.

| improve this answer | |
  • Adding the Domain Computers group seemed to work, thanks! – maigelm May 4 '18 at 14:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.