What permissions are set for folders in the C:\ProgramData\Symantec directory on Notification Server?

book

Article ID: 184963

calendar_today

Updated On:

Products

Management Platform (Formerly known as Notification Server)

Issue/Introduction

What permissions are set for folders in the C:\ProgramData\Symantec directory on Notification Server?

Resolution

Symantec Management Platform

  • C:\ProgramData\Symantec
    Inherits permissions from “ProgramData” folder.
  • C:\ProgramData\Symantec\Symantec Agent
    Inherits permissions from “Symantec” folder.
  • C:\ProgramData\Symantec\Symantec Agent\Alerts
    Inherits permissions from “Symantec Agent” folder.
  • C:\ProgramData\Symantec\Symantec Agent\InstallLogs
    Inherits permissions from “Symantec Agent” folder.
  • C:\ProgramData\Symantec\Symantec Agent\Logs
    • Full Control” rights are granted for:
      “Administrators” group
      SYSTEM
    • Read & execute", "Read", "Write", "List folder contents” rights are granted for:
      Users
  • C:\ProgramData\Symantec\Symantec Agent\CrashDumps
    • Full Control” rights are granted for:
      “Administrators” group
      SYSTEM
      Users
      Power Users
  • C:\ProgramData\Symantec\Symantec Agent\Ldb
    • Full Control” rights are granted for:
      “Administrators” group
      SYSTEM
  • C:\ProgramData\Symantec\Telemetry
    Inherits permissions from “Symantec” folder.
  • C:\ProgramData\Symantec\SMP
    Inherits permissions from “Symantec” folder.
  • C:\ProgramData\Symantec\SMP\DAL
    Inherits permissions from “SMP” folder. (Same for all dynamically created subfolders.)
  • C:\ProgramData\Symantec\SMP\EventQueue
    Inherits permissions from “SMP” folder.
  • C:\ProgramData\Symantec\SMP\EventQueue\EvtInbox
    C:\ProgramData\Symantec\SMP\EventQueue\EvtQFast
    C:\ProgramData\Symantec\SMP\EventQueue\EvtQLarge
    C:\ProgramData\Symantec\SMP\EventQueue\EvtQPriority
    C:\ProgramData\Symantec\SMP\EventQueue\EvtQSlow
    C:\ProgramData\Symantec\SMP\EventQueue\EvtQueue
    C:\ProgramData\Symantec\SMP\EventQueue\Temp
    Inherit permissions from “SMP” folder.
    • Additionally to inherited permissions, ”Modify" rights are granted for:
      IIS_IUSRS
      IUSR
  • C:\Programdata\Symantec\SMP\KMS
    • Full Control” rights are granted for:
      “Administrators” group
      SYSTEM
  • C:\ProgramData\Symantec\SMP\Logs
    Inherits permissions from “SMP” folder.
    • Additionally to inherited permissions, “Read & execute” rights are granted for:
      IIS_IUSRS
      IUSR
  • C:\Programdata\Symantec\SMP\Replication
    • Full Control” rights are granted for:
      “Administrators” group
      SYSTEM
  • C:\ProgramData\Symantec\SMP\Settings
    Inherits permissions from “SMP” folder.
  • C:\ProgramData\Symantec\SMP\Snapshots
    Inherits permissions from “SMP” folder.
  • C:\ProgramData\Symantec\SMP\Temp
    Inherits permissions from “SMP” folder.
    • Additionally to inherited permissions, “Modify” rights are granted for:
      IIS_IUSRS
      IUSR

Inventory Solution

  • C:\ProgramData\Symantec\Inventory Agent
    Inherits permissions from "ProgramData" folder.
    • Additionally to inherited permissions, "Full Control" rights are granted for:
      • Everyone
    Inventory Solution creates folder under "Symantec" only if Inventory plug-in is installed and inventory is gathered on this computer.

Patch Management Solution

  • C:\ProgramData\Symantec\Patch
    Inherits permissions from platform "Symantec" folder.
  • Subfolders under C:\ProgramData\Symantec\Patch
    Inherits permissions from "Patch" folder.
    Additional files and subfolders are created when Software Update plug-in installs updates.