Page 1 of 1

[RESOLVED] Packets with Network Sharing Access

Published: February 14, 2024 - 8:28 AM
by Yan
Hello :) ,
I need to retrieve configuration files as part of an .exe file installation.
Rather than placing the files in the WAPT package (to limit its size), I want to copy them to the client machine from a network share.
When I test the installation from the PC hosting the WAPT console, everything works. (Using PyScripter, WAPT:install)
When I distribute the package, I get a folder access error: Source directory not found.
The share access rights are correct because it works from the WAPT console server...
Is there some subtlety I'm missing? (Probably!)
Thank you for your help. :)

[RESOLVED] Re: Packets with Network Sharing Access

Published: February 15, 2024 - 11:01 AM
by Yan
I found the solution.
The WAPT service runs under a local system account (NT_Authority\System) and may not have access to the network share specified in the WAPT package.
Simply adding the Everyone to the share fixes it.
The solution was actually quite simple... but not secure.

Re: Packets with Network Sharing Access

Published: February 15, 2024 - 3:53 PM
by dcardon
Hi Yann,

indeed, the WAPT agent runs in LOCALSYSTEM and therefore uses the machine account to run. You can restrict access to network shares to only the machines (or a group of machines).
That said, we don't recommend this approach because a package should be self-contained. WAPT package installation often occurs when the machine is shut down, at a time when there may no longer be a network connection (e.g., a user working remotely with their VPN connection down once the session ends, a machine using wired or Wi-Fi 802.11x, etc.).
Furthermore, for traceability, it's easier to log package modifications to see who made the changes; on a remote share, this is a bit more difficult to manage.

If you have a large application with several different configurations, you can create one package for the application installation and several packages for the configurations.

Best regards,

Denis