Service User, Permissions, and Dynamic IP Addresses

[Dave Shawley]

Hi all,

I've spent the morning greping the web for any information about this
little problem that I am having without any real success. Basically I
have a Windows service running on a 2003 server box that needs to
dynamically manage IP addresses on two of the NICs using AddIPAddress
and the other IP Helper APIs. Historically the service was running
under Local System privileges but now it needs access to network
shares...

The easiest way that I can think of to do this is to set up a user for
the service to run under and configure the network shares
appropriately. The problem is that I don't know what permission
settings are required for adding and removing IP addresses. I've tried
"Act as part of the OS" and the other obvious ones to no avail. Does
anyone out there happen to know what security settings are required for
this? or, even better, is there another way to give network share
access to a service while it is running under Local System (in a secure
manner, of course).

Thanks a bunch,
Dave.
--

 

[Joe Richards [MVP]]

LocalSystem should be able to access remote shares assuming the machines
are in an AD forest. You just assign rights for the computer account to
access the share/files.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm