What are the minimum account permissions required for the NSCap folder and subfolders for Notification to properly function?

Products

• IT Management Suite
• Client Management Suite

Issue/Introduction

By default, the \Program Files\Altiris\Notification Server\NSCap folder, subfolders and share permissions include the built-in group 'Everyone'. What are the minimum account permissions required for these areas for Notification Server to properly function?

Resolution

The following share and file system permissions are the minimum that have been found to work:

NSCap share:

• Application Identity (Service Account) and Administrators need Full Control.  (Everyone > Full Control is default, but is not required)  If we're using an Agent Connectivity Credential (KB 194234) then that account also needs Full Control on the NSCap Share.

\Program Files\Altiris\Notification Server\NSCap folder:

• Notification Server Application Identity account, and iusr_computername with Full Control