Answered Access Denied in Local System Account Service

  • Monday, September 13, 2010 7:21 AM
     
     
    Hello all,

    I have an application which access files on network share, Now the requirement is that instead of application a service should access the files on network share and the service must be running on "LOCAL SYSTEM ACCOUNT", I guess it's pretty easy when make service as NetworkService Account to access files on network, But the requirement is to make service on "LOCAL SYSTEM ACCOUNT" only.

    Further research tells me that i need to setup a "null session share" if LSA needs to access network, So i did that with some help from This Page , But It always gives me access denied.

    Any help will be appreciated..


    Thanks..

All Replies

  • Monday, September 13, 2010 12:30 PM
     
     Answered

    gothic_coder wrote:

    I have an application which access files on network share, Now the  requirement is that instead of application a service should
    access the files on network share and the service must be running on  "LOCAL SYSTEM ACCOUNT"

    Local system account has no network credentials and cannot access any  resources over the network.

    I guess it's pretty easy when make
    service as NetworkService Account to access files on network, But the  requirement is to make service on "LOCAL SYSTEM ACCOUNT"
    only.  

    You'll have to reconsider your requirement.

    Further research tells me that i need to setup a "null session share"  if LSA needs to access network, So i did that with some
    help fromThis Page <http://support.microsoft.com/kb/124184> , But It  always gives me access denied.

    Check out Applies To section in this KB article. I'm pretty sure you are  not running Windows NT.


    Igor Tandetnik

  • Monday, September 13, 2010 12:55 PM
     
     

    Thanks for the reply Igor,

    I am using windows 2000, Anyways so isn't there any way to do that? I mean accessing network resource with LSA.

  • Monday, September 13, 2010 12:59 PM
     
     

    gothic_coder wrote:

    I am using windows 2000, Anyways so isn't there any way to do that? I  mean accessing network resource with LSA.

    Not to my knowledge.


    Igor Tandetnik

  • Monday, September 13, 2010 1:31 PM
     
     
    Alright, Thanks :)