Home/ Questions/Q 8341319
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-09T05:26:47+00:00

I’m not sure if this is proper place for such question (maybe should be

  • 0

I’m not sure if this is proper place for such question (maybe should be placed on SuperUser?), but I’ll try.

I have one C# console application and one Windows service. Both does the same, but console app was created before and is kept for backward compatibility. Each of these is running WCF service, whose methods operates on files in C:\ProgramData\MyApp. Console app is run as limited user (non-admin), Windows service runs as NT AUTHORITY\NETWORK SERVICE. When app creates some dirs/files, service cannot delete it and vice versa.

I would like to have it secured. My question is: should I grant full permissions on C:\ProgramData\MyApp to NETWORK SERVICE and current user? Or should I create dedicated user for running service/app?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Assuming your application does not set explicit security permission on newly created files, granting Network Service account Delete permissions on the folder would solve your immediate problem.

    This command will do the work:

    icacls c:\ProgramData\MyApp /t /grant "NETWORK SERVICE":(OI)(CI)(IO)D

    Repeat the same for your other user service account.

    • 0