Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot

[Daniel Helgenberger (JIRA)]

Title: Message Title

Daniel Helgenberger commented on PUP-7793   Re: Puppet agent replacing transactionstore.yaml on first run after boot Hello Ethan Brown, my inital puppet runs are performed by the domian account user already: Installer is run by local admin, specifying domain, domain account, account password Service is stared after installer run automatically and run under the specified user account I do not explicitly add the domain user account to local administrator group, [since the MSI installer takes care of that](https://docs.puppet.com/puppet/5.1/install_windows.html#puppetagentaccountuser). I double checked, and our pupped domain user is indeed member of administrators. The requested acl's: C:/ProgramData/PuppetLabs/puppet/cache/state Path : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state Owner : BUILTIN\Administrators Group : MBOX\Domain Admins Access : NULL SID Allow AppendData Everyone Allow ReadAndExecute, Synchronize CREATOR OWNER Allow DeleteSubdirectoriesAndFiles, Write, Delete, Read, ChangePermissions, TakeOwnership, Synchronize CREATOR OWNER Allow FullControl CREATOR GROUP Allow Read, Synchronize CREATOR GROUP Allow ReadAndExecute, Synchronize NT AUTHORITY\SYSTEM Allow FullControl BUILTIN\Administrators Allow FullControl MBOX\Domain Admins Allow ReadAndExecute, Synchronize Audit : Sddl : O:BAG:DAD:PAI(A;;LC;;;S-1-0-0)(A;;0x1200a9;;;WD)(A;OIIO;0x1f01df;;;CO)(A;CIIO;FA;;;CO)(A;OIIO;FR;;;CG)(A;CIIO;0x1200a9;;;CG)(A;OICI;FA;;;SY)(A;;FA;;;BA)(A;;0x1200a9;;;DA) C:/ProgramData/PuppetLabs/puppet/cache Path : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache Owner : BUILTIN\Administrators Group : MBOX\Domain Admins Access : NT AUTHORITY\SYSTEM Allow FullControl BUILTIN\Administrators Allow FullControl CREATOR OWNER Allow 268435456 BUILTIN\Users Allow ReadAndExecute, Synchronize BUILTIN\Users Allow Write Audit : Sddl : O:BAG:DAD:AI(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)(A;OICIIOID;GA;;;CO)(A;OICIID;0x1200a9;;;BU)(A;CIID;DCLCRPCR;;;BU) C:/ProgramData/PuppetLabs/puppet Path : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet Owner : NT AUTHORITY\SYSTEM Group : NT AUTHORITY\SYSTEM Access : NT AUTHORITY\SYSTEM Allow FullControl BUILTIN\Administrators Allow FullControl CREATOR OWNER Allow 268435456 BUILTIN\Users Allow ReadAndExecute, Synchronize BUILTIN\Users Allow Write Audit : Sddl : O:SYG:SYD:AI(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)(A;OICIIOID;GA;;;CO)(A;OICIID;0x1200a9;;;BU)(A;CIID;DCLCRPCR;;;BU) Add Comment   This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.