Deployment Solution

 View Only
  • 1.  Bootworks Account Minimum Permission

    Posted Aug 28, 2012 11:58 AM

    I'm trying to reconfigure our Bootworks build to use a different service account.  What are the minimum rights needed by a Bootworks account?

    I have found this article, http://www.symantec.com/business/support/index?page=content&id=HOWTO2466, and granted the account modify permissions on the entire eXpress share. (Once I get the account working I'll scale those permissions back to, "read and execute" except for the image and temp directories.)

    When running the new Bootworks config the new account is able to map a drive to the eXpress share but the DAgent is unable to run any jobs. Instead, the agent shows a status of, "Connect failed. Error: The server is not responding or is not running."  A minute or two will pass then the status changes to, "Client Record Updated" at which time the deployment server, interface, and multicast entries are populated.

     

    Environment:
    DS 6.9 SP5 MR1
    WinPE 2.1



  • 2.  RE: Bootworks Account Minimum Permission

    Trusted Advisor
    Posted Sep 05, 2012 07:09 AM

    Hmm... this should work fine. My setup is exactly this. Are you sure that when you rebuilt your automation environment that nothing else changed? Looks like TCP problem as the DAgent connectivity is by TCP 402 and this process is entirely independent of the share credentials.

     



  • 3.  RE: Bootworks Account Minimum Permission
    Best Answer

    Trusted Advisor
    Posted Sep 11, 2012 03:53 AM

    Have you had a change to look into this to see why the DAgent can't make the TCP connection. As I said above, this server connection is independent of the drive mapping, thus isn't dependent on share credentials or subfolder permissions.



  • 4.  RE: Bootworks Account Minimum Permission

    Trusted Advisor
    Posted Sep 18, 2012 03:21 AM

    Any luck on this issue yet?