9

We have services running under IIS with pool setup to run under NetworkService identity. If the service required access to a shared folder on a remote server, on previous versions of WinServer we just added the "ServerA$" account to the list of user permission of the share.

Now, in Windows Server 2012 (R2, probably some previous versions as well) the computer account is no longer selectable in the object type window when searching for the user:

Shared folder - object types when selecting permission
(There used to be "Computers" checkbox here)

Now, how do we allow access to a shared folder on ServerB to a process running under NetworkService Identity on ServerA?

veljkoz
  • 157
  • 3
  • 8
  • Are you trying to give "normal" SMB Share rights on your share? I looked on my Windows Server 2012R2 Server and checked the Filerightes of and folder. On my system i can select Computers and serviceaccounts... – frupfrup May 07 '15 at 12:16
  • (sorry for this step-by-step, I want to make sure we're on the same page) - Right click folder, choose "Share with" -> "Specific people", choose "Find people", on the popup click the "Object types" - there's no computers account here... – veljkoz May 07 '15 at 12:37

2 Answers2

4

You need to use advanced sharing for this, go to
Properties
Sharing Tab
Advanced Sharing
Tick 'Share this Folder'
Click Permissions
Click Add
Click Object Types

The computer object will be shown in the list of available objects

enter image description here

Evolutionise
  • 311
  • 1
  • 4
1

you have to go to properties --> sharing --> advanced shareing. There you can choose the computer under the "object types".

But i would prevere to set the share to "everyone" and then change the rights over the NTFS-User rights. So you only have to manage the rights on one side...

frupfrup
  • 853
  • 4
  • 13
  • 27