Pieter, 

 

Thank you very much for the detailed notes – much appreciated 

 

I will give some of those thoughts a try 

 

Cheers, 

 

Jonathan 

 

From: Servers Alive Discussion List [mailto:salive@woodstone.nu] On Behalf Of 
Demeulemeester, Pieter
Sent: Thursday, September 1, 2016 12:16 AM
To: Servers Alive Discussion List <salive@woodstone.nu>
Subject: RE: Re[2]: [SA-list] Minimum permissions for free disk space check 

 

Hi Jonathan, 

 

Two things to consider: 

1.      NTFS rights on the drive/folder (i.e. C:\) 

2.      Rights on the network share (i.e. \\SERVER\C$ (file:///\\SERVER\C$)) 

Local admins have sufficient rights on both levels, as you already knew. 

 

I suppose &#8220;Backup Operators&#8221; or &#8220;Network Configuration 
Operators&#8221; could help you out, didn&#8217;t test it though. 

 

I understand the concern of DBA/Network admin. Just guessing that the Service 
Account you mentioned is just a simple account with &#8220;password never 
expires&#8221; and used for running Servers Alive service. Personally I use a 
&#8220;Managed Service Account&#8221;.  That&#8217;s a special type of account 
in AD version 2008R2 (and up), see 
https://technet.microsoft.com/en-us/library/dd560633(v=ws.10).aspx 
(https://technet.microsoft.com/en-us/library/dd560633(v=ws.10).aspx).  A 
Managed Service Account still has to be member of the Local Admins group.  The 
advantage is that it changes its password every 30 (I think) days and modifies 
the service automatically.  

Maybe your DBA can agree with that. 

 

Finally: the problem is not related to Servers Alive.  I advise you to test it 
with: 

-         logon to the Servers Alive server with your Service Account  
(can&#8217;t do that with a Managed Service Account, because nobody knows its 
password) 

-         Type &#8220;dir \\SERVER\C$ (file:///\\SERVER\C$)&#8221; at a CLI 
prompt 

 

Kind regards, 

Pieter 

 

From: Servers Alive Discussion List [mailto:salive@woodstone.nu 
(mailto:salive@woodstone.nu)] On Behalf Of Jonathan Lathigee
Sent: woensdag 31 augustus 2016 17:35
To: Servers Alive Discussion List
Subject: RE: Re[2]: [SA-list] Minimum permissions for free disk space check 

 

And other drives? I was actually asking about the &#8220;S&#8221; drive on one 
of my systems, but the email conversation changed to &#8220;C&#8221;. I&#8217;m 
assuming now that C drive permissions are special, and different from other 
drives, correct? 

 

 

 

From: Servers Alive Discussion List [mailto:salive@woodstone.nu 
(mailto:salive@woodstone.nu)] On Behalf Of Anthony Laatz
Sent: Tuesday, August 30, 2016 5:36 PM
To: Servers Alive Discussion List <salive@woodstone.nu 
(mailto:salive@woodstone.nu)>
Subject: Re[2]: [SA-list] Minimum permissions for free disk space check 

 

c$ is an admin share, you have to be an admin on the target machine to 
use/access this share. 


See if you can get C shared out as ready-only (and a different share name other 
than 'C') to the service account you are trying to use. 


Otherwise you will need to go into the registry and local security settings on 
the machine to change permissions of the c$ share. 


 


------ Original Message ------ 


From: "Jonathan Lathigee" <jlathi...@crd.bc.ca (mailto:jlathi...@crd.bc.ca)> 


To: "Servers Alive Discussion List" <salive@woodstone.nu 
(mailto:salive@woodstone.nu)> 


Sent: 08/30/2016 18:35:26 


Subject: RE: [SA-list] Minimum permissions for free disk space check 


 


Hi Dirk, 

 

Yes, I guess that&#8217;s what I&#8217;m asking. What access rights need to be 
given on the C$ share in order for a service account to read disk space? 

 

I have given the service account full rights on the C drive (not an option), 
and it didn&#8217;t work. I added service account to local admins (not an 
option) and it *did* work. I added service account to &#8220;performance 
monitor users&#8221; group and it didn&#8217;t work. 

 

Thanks, 

 

Jonathan 

 

From: Servers Alive Discussion List [mailto:salive@woodstone.nu 
(mailto:salive@woodstone.nu)] On Behalf Of Dirk Bulinckx
Sent: Tuesday, August 30, 2016 2:10 PM
To: Servers Alive Discussion List <salive@woodstone.nu 
(mailto:salive@woodstone.nu)>
Subject: RE: [SA-list] Minimum permissions for free disk space check 

 

That depends on the access rights that are given on the c$ share 

 
--------------------------------------------------------------------------------



From: Servers Alive Discussion List [mailto:salive@woodstone.nu 
(mailto:salive@woodstone.nu)] On Behalf Of Jonathan Lathigee
Sent: Tuesday, August 30, 2016 8:00 PM
To: Servers Alive Discussion List
Subject: [SA-list] Minimum permissions for free disk space check 

On Windows Server 2013, what are the minimum permissions required for servers 
alive to read available disk space via a disk space check of the format: 
file://SERVERNAME/C$ (file:///\\SERVERNAME\C$) ?? 

 

I want to use a service account to carry out the check, but DBA / Networks do 
not want to give the service account more than bare minimum permissions 
(understandably) to report on available disk space. SO far I have only had 
success when I place the service account in the local administrators group (not 
an option). 

 

Thanks in advance, 

 

Jonathan 

 

 

.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 

 

Jonathan Lathigee | BA 

 

Supervisor, Application Development 

Information Technology & GIS 

Capital Regional District 

 

625 Fisgard St, PO BOX 1000, 

Victoria, BC V8W 2S6 

 

T. 250.360.3257 

Find the CRD Online: www.crd.bc.ca (http://www.crd.bc.ca/)  | Facebook  
(https://www.facebook.com/pages/Capital-Regional-District/236765559766478) | 
Twitter  (https://twitter.com/crd_bc) 

 

.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  . 

 

This message is intended only for the use of the individual or entity named 
above, and may contain information that is privileged, confidential or exempt 
from disclosure under applicable law. If you are not the intended recipient or 
their employee or agent responsible for receiving the message on their behalf 
your receipt of this message is in error and not meant to waive privilege in 
this message. Please notify us immediately, and delete the message and any 
attachments without reading the attachments. Any dissemination, distribution or 
copying of this communication by anyone other than the intended recipient is 
strictly prohibited. Thank you. Please consider the environment before printing 
this email. 

To unsubscribe send a message with UNSUBSCRIBE in the subject line to 
salive@woodstone.nu (mailto:salive@woodstone.nu)
If you use auto-responders (like out-of-the-office messages), make sure that 
they are not sent to the list nor to individual members. Doing so will cause 
you to be automatically removed from the list. 

No virus found in this message.
Checked by AVG - www.avg.com (http://www.avg.com/)
Version: 2016.0.7752 / Virus Database: 4649/12909 - Release Date: 08/30/16 



To unsubscribe send a message with UNSUBSCRIBE in the subject line to 
salive@woodstone.nu (mailto:salive@woodstone.nu)
If you use auto-responders (like out-of-the-office messages), make sure that 
they are not sent to the list nor to individual members. Doing so will cause 
you to be automatically removed from the list. 



To unsubscribe send a message with UNSUBSCRIBE in the subject line to 
salive@woodstone.nu (mailto:salive@woodstone.nu)
If you use auto-responders (like out-of-the-office messages), make sure that 
they are not sent to the list nor to individual members. Doing so will cause 
you to be automatically removed from the list. 



To unsubscribe send a message with UNSUBSCRIBE in the subject line to 
salive@woodstone.nu (mailto:salive@woodstone.nu)
If you use auto-responders (like out-of-the-office messages), make sure that 
they are not sent to the list nor to individual members. Doing so will cause 
you to be automatically removed from the list. 



To unsubscribe send a message with UNSUBSCRIBE in the subject line to 
salive@woodstone.nu (mailto:salive@woodstone.nu)
If you use auto-responders (like out-of-the-office messages), make sure that 
they are not sent to the list nor to individual members. Doing so will cause 
you to be automatically removed from the list. 
--------------------------------------------------------------------------------



Dit bericht wordt verzonden vanuit een e-mailadres voor professioneel gebruik. 
De verantwoordelijken binnen de organisatie kunnen kennis nemen van alle 
berichten verzonden naar dit adres.
Le présent message est envoyé d'une adresse e-mail pour usage professionnel. 
Les responsables de l'organisation peuvent prendre connaissance de tous les 
messages envoyés à cette adresse.
This message is sent from an e-mail address for professional use only. The 
persons in charge of the organisation may take note of all messages sent to 
this address. 



To unsubscribe send a message with UNSUBSCRIBE in the subject line to 
salive@woodstone.nu (mailto:salive@woodstone.nu)
If you use auto-responders (like out-of-the-office messages), make sure that 
they are not sent to the list nor to individual members. Doing so will cause 
you to be automatically removed from the list. 

To unsubscribe send a message with UNSUBSCRIBE in the subject line to 
salive@woodstone.nu
If you use auto-responders (like out-of-the-office messages), make sure that 
they are not sent to the list nor to individual members. Doing so will cause 
you to be automatically removed from the list. 

Reply via email to