Access to nxlog folder on all domain controlers for non-preveledged domain user

Question

Access to nxlog folder on all domain controlers for non-preveledged domain user

Dharmendra Kumar 21

so scenario is that, we have 90+ DC's with 2016 OS and nxlog tool installed on all DC's so nxlog folder need to be accessed by one domain user to view the logs. so my requirement is how can i manage the permission to user so that he can only read and write the logs in nxlog folder only on all DC's with least access, he should manage the only nxlog folder and nothing else on DC.

nxlog folder path in C drive

Accepted answer

1 additional answer

Your answer

Answer 1

Anonymous

now not able to manage the GPO

Please close this one by marking answer and open a new thread for this new ask, probably over here. windows-group-policy

Answer 2

Anonymous

Share the folder with appropriate permissions for the user.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Dharmendra Kumar 21 Reputation points

2022-11-22T12:58:00.627+00:00

hi , thank for the reply,
I have followed the below steps to manage

high level steps should be like this

1 - Create nxlog folder on dcs "\dc\c$\Program Files\nxlog" --> create access group -->add non Domain Admin user to group --> share folder with Modify/Change rights (Share permissions) - remove Everyone --> assign group modify rights to the nxlog folder (NTFS)

2 - Create a group policy --> Assign policy to the test DC --> Use the Share feature in the GPO to share the folder -->gpupdate /force on DC

now not able to manage the GPO to replicate the share permission (only) which i have made on one domain controller that share permission should be replicate to all domain controllers, not able to find suitable option in GPO

Share via

Access to nxlog folder on all domain controlers for non-preveledged domain user

1 additional answer

Your answer