Re: Service running as Local system account Unable to map drive on ano



The most common use I have deployed them for in companies is for software installation shares for apps that aren't security critical and it doesn't matter who sees the installation packages.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


Phillip Windell wrote:
"Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx> wrote in message
news:uK8aEF1CGHA.2644@xxxxxxxxxxxxxxxxxxxxxxx
If kerberos auth is being used, you simply grant rights for the computer
account
from AD on the share and the file system. The security concern is that
ANYTHING
running as localsystem on the specific computer will have access to the
share.

Ok, that makes sense.

For anonymous access you enable the null session share and set the ACL on
the

This is the first time I have seen the term "null session share",...I've
never heard of it.

.