Pieter,
Thank you very much for the detailed notes – much appreciated I will give some of those thoughts a try Cheers, Jonathan From: Servers Alive Discussion List [mailto:salive@woodstone.nu] On Behalf Of Demeulemeester, Pieter Sent: Thursday, September 1, 2016 12:16 AM To: Servers Alive Discussion List <salive@woodstone.nu> Subject: RE: Re[2]: [SA-list] Minimum permissions for free disk space check Hi Jonathan, Two things to consider: 1. NTFS rights on the drive/folder (i.e. C:\) 2. Rights on the network share (i.e. \\SERVER\C$ (file:///\\SERVER\C$)) Local admins have sufficient rights on both levels, as you already knew. I suppose “Backup Operators” or “Network Configuration Operators” could help you out, didn’t test it though. I understand the concern of DBA/Network admin. Just guessing that the Service Account you mentioned is just a simple account with “password never expires” and used for running Servers Alive service. Personally I use a “Managed Service Account”. That’s a special type of account in AD version 2008R2 (and up), see https://technet.microsoft.com/en-us/library/dd560633(v=ws.10).aspx (https://technet.microsoft.com/en-us/library/dd560633(v=ws.10).aspx). A Managed Service Account still has to be member of the Local Admins group. The advantage is that it changes its password every 30 (I think) days and modifies the service automatically. Maybe your DBA can agree with that. Finally: the problem is not related to Servers Alive. I advise you to test it with: - logon to the Servers Alive server with your Service Account (can’t do that with a Managed Service Account, because nobody knows its password) - Type “dir \\SERVER\C$ (file:///\\SERVER\C$)” at a CLI prompt Kind regards, Pieter From: Servers Alive Discussion List [mailto:salive@woodstone.nu (mailto:salive@woodstone.nu)] On Behalf Of Jonathan Lathigee Sent: woensdag 31 augustus 2016 17:35 To: Servers Alive Discussion List Subject: RE: Re[2]: [SA-list] Minimum permissions for free disk space check And other drives? I was actually asking about the “S” drive on one of my systems, but the email conversation changed to “C”. I’m assuming now that C drive permissions are special, and different from other drives, correct? From: Servers Alive Discussion List [mailto:salive@woodstone.nu (mailto:salive@woodstone.nu)] On Behalf Of Anthony Laatz Sent: Tuesday, August 30, 2016 5:36 PM To: Servers Alive Discussion List <salive@woodstone.nu (mailto:salive@woodstone.nu)> Subject: Re[2]: [SA-list] Minimum permissions for free disk space check c$ is an admin share, you have to be an admin on the target machine to use/access this share. See if you can get C shared out as ready-only (and a different share name other than 'C') to the service account you are trying to use. Otherwise you will need to go into the registry and local security settings on the machine to change permissions of the c$ share. ------ Original Message ------ From: "Jonathan Lathigee" <jlathi...@crd.bc.ca (mailto:jlathi...@crd.bc.ca)> To: "Servers Alive Discussion List" <salive@woodstone.nu (mailto:salive@woodstone.nu)> Sent: 08/30/2016 18:35:26 Subject: RE: [SA-list] Minimum permissions for free disk space check Hi Dirk, Yes, I guess that’s what I’m asking. What access rights need to be given on the C$ share in order for a service account to read disk space? I have given the service account full rights on the C drive (not an option), and it didn’t work. I added service account to local admins (not an option) and it *did* work. I added service account to “performance monitor users” group and it didn’t work. Thanks, Jonathan From: Servers Alive Discussion List [mailto:salive@woodstone.nu (mailto:salive@woodstone.nu)] On Behalf Of Dirk Bulinckx Sent: Tuesday, August 30, 2016 2:10 PM To: Servers Alive Discussion List <salive@woodstone.nu (mailto:salive@woodstone.nu)> Subject: RE: [SA-list] Minimum permissions for free disk space check That depends on the access rights that are given on the c$ share -------------------------------------------------------------------------------- From: Servers Alive Discussion List [mailto:salive@woodstone.nu (mailto:salive@woodstone.nu)] On Behalf Of Jonathan Lathigee Sent: Tuesday, August 30, 2016 8:00 PM To: Servers Alive Discussion List Subject: [SA-list] Minimum permissions for free disk space check On Windows Server 2013, what are the minimum permissions required for servers alive to read available disk space via a disk space check of the format: file://SERVERNAME/C$ (file:///\\SERVERNAME\C$) ?? I want to use a service account to carry out the check, but DBA / Networks do not want to give the service account more than bare minimum permissions (understandably) to report on available disk space. SO far I have only had success when I place the service account in the local administrators group (not an option). Thanks in advance, Jonathan . . . . . . . . . . . . . . . . . . . . Jonathan Lathigee | BA Supervisor, Application Development Information Technology & GIS Capital Regional District 625 Fisgard St, PO BOX 1000, Victoria, BC V8W 2S6 T. 250.360.3257 Find the CRD Online: www.crd.bc.ca (http://www.crd.bc.ca/) | Facebook (https://www.facebook.com/pages/Capital-Regional-District/236765559766478) | Twitter (https://twitter.com/crd_bc) . . . . . . . . . . . . . . . . . . . . This message is intended only for the use of the individual or entity named above, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If you are not the intended recipient or their employee or agent responsible for receiving the message on their behalf your receipt of this message is in error and not meant to waive privilege in this message. Please notify us immediately, and delete the message and any attachments without reading the attachments. Any dissemination, distribution or copying of this communication by anyone other than the intended recipient is strictly prohibited. Thank you. Please consider the environment before printing this email. To unsubscribe send a message with UNSUBSCRIBE in the subject line to salive@woodstone.nu (mailto:salive@woodstone.nu) If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list. No virus found in this message. Checked by AVG - www.avg.com (http://www.avg.com/) Version: 2016.0.7752 / Virus Database: 4649/12909 - Release Date: 08/30/16 To unsubscribe send a message with UNSUBSCRIBE in the subject line to salive@woodstone.nu (mailto:salive@woodstone.nu) If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list. To unsubscribe send a message with UNSUBSCRIBE in the subject line to salive@woodstone.nu (mailto:salive@woodstone.nu) If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list. To unsubscribe send a message with UNSUBSCRIBE in the subject line to salive@woodstone.nu (mailto:salive@woodstone.nu) If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list. To unsubscribe send a message with UNSUBSCRIBE in the subject line to salive@woodstone.nu (mailto:salive@woodstone.nu) If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list. -------------------------------------------------------------------------------- Dit bericht wordt verzonden vanuit een e-mailadres voor professioneel gebruik. De verantwoordelijken binnen de organisatie kunnen kennis nemen van alle berichten verzonden naar dit adres. Le présent message est envoyé d'une adresse e-mail pour usage professionnel. Les responsables de l'organisation peuvent prendre connaissance de tous les messages envoyés à cette adresse. This message is sent from an e-mail address for professional use only. The persons in charge of the organisation may take note of all messages sent to this address. To unsubscribe send a message with UNSUBSCRIBE in the subject line to salive@woodstone.nu (mailto:salive@woodstone.nu) If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list. To unsubscribe send a message with UNSUBSCRIBE in the subject line to salive@woodstone.nu If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list.
