Solved

NTFS Quota applied to NT AUTHORITY\SYSTEM user (and other system accounts)

Posted on 2008-10-17
2
1,879 Views
Last Modified: 2013-12-23
We have a GPO that applies a default quota for all (domain) users on Vista workstations.  However, it seems that this quota is also being applied to some system accounts such as the following.

NT AUTHORITY\SYSTEM
NT AUTHORITY\Local Service
NT AUTHORITY\Network Service

We can't really have these accounts under a quota.   I'm not sure why these are being applied.

Capture.JPG
0
Comment
Question by:Nate630
2 Comments
 
LVL 2

Accepted Solution

by:
Nate630 earned 0 total points
Comment Utility
I submitting an issue with MS.  The quota setting in the Vista GPO (domain) can only be set on the machine level.  There is no user quota settings (except for roaming profiles).
Since the GPO is set on the machine level, then all accounts, including the ones listed in this issue are given the quota.  This is by design -- since the GPO is processed at the system/machine level.
We used the following script to 'fix' the issue.

''''''''''''''''''''''''''''''''''''''''

' Disk Quota Fixer for Vista Computers

''''''''''''''''''''''''''''''''''''''''
 
 

'' Enable Quotas if not already done

Const ENABLE_QUOTAS = 2

Set colDiskQuotas = CreateObject("Microsoft.DiskQuota.1")

colDiskQuotas.Initialize "C:\", True

colDiskQuotas.QuotaState = ENABLE_QUOTAS
 

'' Set Disk Quotas for the Follow users

Set colDiskQuotas = CreateObject("Microsoft.DiskQuota.1")

colDiskQuotas.Initialize "C:\", True

set objUser = colDiskQuotas.FindUser("NT AUTHORITY\SYSTEM")

objUser.QuotaThreshold = 99999999999999

objUser.QuotaLimit = 99999999999999
 

Set colDiskQuotas = CreateObject("Microsoft.DiskQuota.1")

colDiskQuotas.Initialize "C:\", True

set objUser = colDiskQuotas.FindUser("NT AUTHORITY\NETWORK SERVICE")

objUser.QuotaThreshold = 99999999999999

objUser.QuotaLimit = 99999999999999
 

Set colDiskQuotas = CreateObject("Microsoft.DiskQuota.1")

colDiskQuotas.Initialize "C:\", True

set objUser = colDiskQuotas.FindUser("NT AUTHORITY\LOCAL SERVICE")

objUser.QuotaThreshold = 99999999999999

objUser.QuotaLimit = 99999999999999
 

Set colDiskQuotas = CreateObject("Microsoft.DiskQuota.1")

colDiskQuotas.Initialize "C:\", True

set objUser = colDiskQuotas.FindUser("Administrator")

objUser.QuotaThreshold = 99999999999999

objUser.QuotaLimit = 99999999999999
 

Set colDiskQuotas = CreateObject("Microsoft.DiskQuota.1")

colDiskQuotas.Initialize "C:\", True

set objUser = colDiskQuotas.FindUser("NT SERVICE\TrustedInstaller")

objUser.QuotaThreshold = 99999999999999

objUser.QuotaLimit = 99999999999999

Open in new window

0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now