As the user, yes.
Is there a way to test access to the path in the context of the machine? From: Paul Hutchings [mailto:[email protected]] Sent: Tuesday, August 24, 2010 2:07 PM To: NT System Admin Issues Subject: RE: 2008 DFS Question If I look at my DFS volumes I have "everyone" on the share and at the NTFS level I have a group that contains Domain Computers. That suggests that "everyone" contains domain computers (which makes sense as everyone should be all authenticated users) as otherwise they wouldn't be able to access the share. Ignore DFS for a moment, if you use the direct path to the share on the server does it work? From: Kelsey, John [mailto:[email protected]] Sent: 24 August 2010 18:59 To: NT System Admin Issues Subject: RE: 2008 DFS Question But where does the computer account need permission at? I have both the share and NTFS at 'everyone'. Isn't 'everyone' in fact everyone (including computer accounts) ? From: Paul Hutchings [mailto:[email protected]] Sent: Tuesday, August 24, 2010 1:54 PM To: NT System Admin Issues Subject: RE: 2008 DFS Question I think you've answered your own question? To deploy software via GPO to the computer, the computer account needs to have access to the files, so as you said you need to do whatever you usually to assign permissions to a group that contains the computers (or use something like Domain Computers). Paul From: Kelsey, John [mailto:[email protected]] Sent: 24 August 2010 18:51 To: NT System Admin Issues Subject: 2008 DFS Question Single namespace on a 2008 domain controller. Target resides on a 2008 file server. DFS links work just dandy for users. They can browse the the links, install software, etc. HOWEVER...when deploying software to the computer using the DFS path, the install fails saying the 'location is unavailable'. Software deployment to a user works just fine. I'm convinced it's a security setting somewhere, almost like the computer account can't access the DFS path. When I add the computer account to the 'domain users' group, the deployment succeeds. I've checked the share permissions on the target, NTFS permissions on the target and those look ok. Is there something I need to do special to allow computers accounts to read DFS paths? Thanks all!! ************************************* John C. Kelsey DuBois Regional Medical Center (: 814.375.3073 2 : 814.375.4005 *: [email protected] ************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
