NTFS permissions for user account used to run LTI process? > Deployment Forum Community Forums

Wednesday, January 07, 2009

Library

Resources

Community

About

Community » Forums

Member Login

StandardLiveID

User Name:

Password:

Remember Login

Forgot Password ?


Guests can view and read messages in the community forums, but you must register and log in to Deployment Forum before you can post messages. Click Register at the top of this page. Before posting messages, please read the forum guidelines at the bottom of this page.

Unanswered Active Topics

Forums Search

Forums > Deployment Solutions > Lite Touch

Subject: NTFS permissions for user account used to run LTI process?

Prev Next

You are not authorized to post a reply.

Author

Messages

David

Posts:50

12/01/2008 11:46 AM
Hello, what are the minimum permissions required for the user account that is to run the LTI deployment process (not builds where image are captured which obviously means write perms would be required, but only deployments)? more info: I have seperate build and deploy deployment points. I build the images using the lab (build) deployment point as an administrator. I have a seperate deployment point that other IT staff will use to deploy custom wim images from. I'm looking to find out the minimum set of permissions required for the user account or group I will create for use with this deployment point.

Mark Allcock User is Offline

Posts:69

12/05/2008 7:10 AM
Hopefully this is the right answer: Deployment Point (DeployRoot) Your deployment point must have at least Read permissions at the NTFS level and Read permissions at the share level. Resource Root (ResourceRoot) If you specify an alternate ResourceRoot variable in your CustomSettings.ini (e.g. for obtaining drivers), then this must have the same NTFS and Share level permissions as the DeployRoot (read only). Logs location (SLShare) If you specify the SLShare variable in your CustomSettings.ini, you must have at least Change permissions at the NTFS level and Change permissions at the Share level. Active Directory If you specify that the workstation must join the domain, then the account you are using (if not a Domain Admin) needs to be delegated the necessary rights over the OU that holds your Computer objects in - this is of course, if you are actually specifying an OU for new Computer objects. Usually "Creat/Delete all child objects" and "Change" is sufficient rights for an OU. Don't forget you also need to have the domain right to 'Add Workstations to the Domain'. I can't think of anything else right now. Hope this helps. Cheers Mark

You are not authorized to post a reply.

Forums > Deployment Solutions > Lite Touch > NTFS permissions for user account used to run LTI process?

ActiveForums 3.7

Forum Policies

These forums are a user-supported community for IT professionals to exchange deployment tips, solutions, and techniques. For the benefit of all Deployment Forum members, please observe the following guidelines when posting to these forums:

We reserve the right to remove any message. Our moderators will remove all messages that are not respectful or productive. Profanity, racism, prejudice, and flaming are not tolerated.
Do not advertise products or services. Our moderators will remove all advertisements or service announcements. Product and service recommendations from active Deployment Forum members are encouraged, however.
Make sure your question isn't already answered. Before posting questions, search the forums. After ensuring that your questions are unique, post them to the most appropriate forum. This will help reduce noise in the forums.
Help make the most of each thread. Do not post unrelated messages to a thread. Also, if you've resolved a question outside of these forums, please share the solution with other members by posting it back to the thread.
Do not share confidential information. Confidential information includes product keys and addresses. Our moderators will edit any message containing confidential information, so double-check messages and their attachments before posting them.
Post messages using only the English language. For the benefit of all Deployment Forum members, please post your messages using the English language.

We hope that you enjoy using this community. Please submit your comments and feedback on the Comments and Feedback page or post them to the Comments, Feedback forum.

Privacy Statement | Terms Of Use