What are the minimum account permissions required for the NSCap folder and subfolders for Notification to properly function?

book

Article ID: 181892

calendar_today

Updated On:

Products

Management Platform (Formerly known as Notification Server)

Issue/Introduction

By default, the \Program Files\Altiris\Notification Server\NSCap folder, subfolders and share permissions include the built-in group 'Everyone'. What are the minimum account permissions required for these areas for Notification Server to properly function?

Resolution

The following share and file system permissions are the minimum that have been found to work:

NSCap share:

  • Everyone group with Read permissions

\Program Files\Altiris\Notification Server\NSCap folder:

  • Notification Server Application Identity account, and iusr_computername with Full permissions

\EvtInbox, \EvtQFast, \EvtQLarge, \EvtQSlow, \EvtQueue subfolders:

  • Application Identity account, and iusr_computername with Full permissions

\Temp subfolder:

  • The Identity account used for the DefaultAppPool, generally the Network Service account, must have Modify permissions
  • The Application Identity account must also have Modify permissions in order for Package Snapshot activity to work