What permissions are set for folders in the C:\ProgramData\Symantec directory on Notification Server?

Products

• IT Management Suite

Issue/Introduction

What permissions are set for folders in the C:\ProgramData\Symantec directory on Notification Server?

Resolution

Symantec Management Platform

• C:\ProgramData\Symantec
  Inherits permissions from “ProgramData” folder.
• C:\ProgramData\Symantec\Symantec Agent
  Inherits permissions from “Symantec” folder.
• C:\ProgramData\Symantec\Symantec Agent\Alerts
  Inherits permissions from “Symantec Agent” folder.
• C:\ProgramData\Symantec\Symantec Agent\InstallLogs
  Inherits permissions from “Symantec Agent” folder.
• C:\ProgramData\Symantec\Symantec Agent\Logs
  • “Full Control” rights are granted for:
    • “Administrators” group
    • SYSTEM
  • “Read & execute", "Read", "Write", "List folder contents” rights are granted for:
    • Users
• C:\ProgramData\Symantec\Symantec Agent\CrashDumps
  • “Full Control” rights are granted for:
    • “Administrators” group
    • SYSTEM
    • Users
    • Power Users
• C:\ProgramData\Symantec\Symantec Agent\Ldb
  • “Full Control” rights are granted for:
    • “Administrators” group
    • SYSTEM
• C:\ProgramData\Symantec\Telemetry
  Inherits permissions from “Symantec” folder.
• C:\ProgramData\Symantec\SMP
  Inherits permissions from “Symantec” folder.
• C:\ProgramData\Symantec\SMP\DAL
  Inherits permissions from “SMP” folder. (Same for all dynamically created subfolders.)
• C:\ProgramData\Symantec\SMP\EventQueue
  Inherits permissions from “SMP” folder.
• C:\ProgramData\Symantec\SMP\EventQueue\EvtInbox
  C:\ProgramData\Symantec\SMP\EventQueue\EvtQFast
  C:\ProgramData\Symantec\SMP\EventQueue\EvtQLarge
  C:\ProgramData\Symantec\SMP\EventQueue\EvtQPriority
  C:\ProgramData\Symantec\SMP\EventQueue\EvtQSlow
  C:\ProgramData\Symantec\SMP\EventQueue\EvtQueue
  C:\ProgramData\Symantec\SMP\EventQueue\Temp
  Inherit permissions from “SMP” folder.
  • Additionally to inherited permissions, ”Modify" rights are granted for:
    • IIS_IUSRS
    • IUSR
• C:\Programdata\Symantec\SMP\KMS
  • “Full Control” rights are granted for:
    • “Administrators” group
    • SYSTEM
• C:\ProgramData\Symantec\SMP\Logs
  Inherits permissions from “SMP” folder.
  • Additionally to inherited permissions, “Read & execute” rights are granted for:
    • IIS_IUSRS
    • IUSR
• C:\Programdata\Symantec\SMP\Replication
  • “Full Control” rights are granted for:
    • “Administrators” group
    • SYSTEM
• C:\ProgramData\Symantec\SMP\Settings
  Inherits permissions from “SMP” folder.
• C:\ProgramData\Symantec\SMP\Snapshots
  Inherits permissions from “SMP” folder.
• C:\ProgramData\Symantec\SMP\Temp
  Inherits permissions from “SMP” folder.
  • Additionally to inherited permissions, “Modify” rights are granted for:
    • IIS_IUSRS
    • IUSR

Inventory Solution

• C:\ProgramData\Symantec\Inventory Agent
  Inherits permissions from "ProgramData" folder.
  • Additionally to inherited permissions, "Full Control" rights are granted for:
    • Everyone
  Inventory Solution creates folder under "Symantec" only if Inventory plug-in is installed and inventory is gathered on this computer.

Patch Management Solution

• C:\ProgramData\Symantec\Patch
  Inherits permissions from platform "Symantec" folder.
• Subfolders under C:\ProgramData\Symantec\Patch
  Inherits permissions from "Patch" folder.
  Additional files and subfolders are created when Software Update plug-in installs updates.