System Account Requirements and Best Practices

1 Star2 Stars3 Stars4 Stars5 Stars
  • Product:
  • Version:
  • Document Type:
  • Revised:
  • Reviewed:


The ExtremeZ-IP service runs under the context of the local SYSTEM account by default. Permission issues can arise if the local System account is missing or does not have full control on your NFTS file system.

As an example, if a Mac client performs an operation that needs to calculate free disk space but the user does not have rights, ExtremeZ-IP will perform this calculation under the SYSTEM account. While ExtremeZ-IP requires the system account to have full control at the root of the drive (drive letter) as well as the root of the folder being shared out, it is also recommended to have SYSTEM=Full Control propagate across the entire drive (same goes for the local Administrator account).


You can use cacls or xcacls (part of Microsoft Support Tools) to propagate such permissions via the command line.


Open a command window: Start > Run > cmd [return]
Change directory to the drive letter root: E: [return]
Run the following: xcacls *.* /T /E /C /G System:F
Run the following: xcacls *.* /T /E /C /G Administrators:F

Xcacls.vbs is an augmented version of Xcacls.exe that addresses specific limitations with the original Xcacls.exe. More information from from Microsoft can be found here.

Related Articles: