0

I would like to have a local folder on all of my domain connected computers kept in sync with a share on one of my servers.

Only Domain Admins and the SYSTEM account should have Modify permissions to the local folder and the share, everyone else should have Read/Execute.

Any suggestions are welcome.

My first thought was to use a GPO to create the local folder, set it’s permissions and create a scheduled task to run RoboCopy.

Getting RoboCopy to run with the right permissions seems to be the trick. I believe it would need to run as the local system account (so that someone being logged in is not necessary), but it also needs to use the computer account for network access.

Which account would I use when creating the Scheduled Task?

Should this work?

Is there a better way?

2 Answers 2

0

I would use the NETWORK SERVICE identity. This would require granting read access to the share to Authenticated Users or Domain Computers. Domain Computers may be preferable, due to the possibility that users may access the share directly and lock a file.

2
  • So I tried using NETWORK SERVICE, but I get the following error... The computer 'CB-Utility-Sync' preference item in the 'CB-Utility Sync Folder {3CE3D239-B40A-4913-9B58-349F539496BF}' Group Policy Object did not apply because it failed with error code '0x80070534 No mapping between account names and security IDs was done.' This error was suppressed.
    – Corey
    Oct 28, 2019 at 14:52
  • But the NTFS permissions were the issue, after I added "Domain Computers", I was able to run the Task using the SYSTEM account. Thanks
    – Corey
    Oct 28, 2019 at 14:53
0

I did a similar thing. I created a user and gave it rights to files and folders and to run task. Then created a task in Windows Task Scheduler. Told it to run weather user is logged on or not and changed the user to the one I wanted. Then I have run a CMD file once a day.

This is my batch file:

@echo off
robocopy C:\Data\Accounting\QBData \\STW2019S-1\stw11p-2$\QBData /E /DCOPY:T /R:10 /W:1 /XO /LOG:C:\utils\scripts\robocopyQB.log /TEE /NP
robocopy "C:\Data\FBbackup" "\\STW2019S-1\stw11p-2$\FBbackup" /E /DCOPY:T /R:10 /W:1 /PURGE /LOG:C:\utils\scripts\robocopyFB.log /TEE /NP

I hope this is helpful :)

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .