What are the minimum account permissions required for the NSCap folder and subfolders for Notification to properly function?

Products

• IT Management Suite

Issue/Introduction

By default, the \Program Files\Altiris\Notification Server\NSCap folder, subfolders and share permissions include the built-in group 'Everyone'. What are the minimum account permissions required for these areas for Notification Server to properly function?

Resolution

The following share and file system permissions are the minimum that have been found to work:

NSCap share:

• Everyone group with Read permissions

\Program Files\Altiris\Notification Server\NSCap folder:

• Notification Server Application Identity account, and iusr_computername with Full permissions

\EvtInbox, \EvtQFast, \EvtQLarge, \EvtQSlow, \EvtQueue subfolders:

• Application Identity account, and iusr_computername with Full permissions

\Temp subfolder:

• The Identity account used for the DefaultAppPool, generally the Network Service account, must have Modify permissions
• The Application Identity account must also have Modify permissions in order for Package Snapshot activity to work