How to set security for Virtual Service Account on Cluster shared Volume

Tecmexium 1 Reputation point
2022-08-08T12:00:04.013+00:00

Hi

In my Scenario i have a Windows Failover Cluster with Cluster shared volume.
Then i have Azure Deployment Agent Services on all the Nodes installed for App Deployment.
The services are running with a virtual service account (least privilege).

I now have the problem that in NTFS Security i can only add the virtual service account from the node where the cluster shared volume is currently located. To add the virtual service accounts from the other nodes i have to faillover the role so the CSV is located on the node were i want to set the service user rights for the folders.

Is this possible without a failover of the Role with the CSV?

BR
da her min gwehr

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,529 questions
Windows Server Clustering
Windows Server Clustering
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Clustering: The grouping of multiple servers in a way that allows them to appear to be a single unit to client computers on a network. Clustering is a means of increasing network capacity, providing live backup in case one of the servers fails, and improving data security.
958 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,356 Reputation points
    2022-08-09T07:28:17.333+00:00

    Hi there,

    I guess it is not possible without using any third-party applications. The best approach is two-fold. The first element requires an immediate plan to identify and bring all accounts under centralized management. The second element entails implementing an ongoing program based on automated onboarding and management of new accounts.

    ----------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept it as an answer–

    0 comments