Managing login credentials and SMB share credentials for accessing the network shares in NT service mode

TurboFTP Sync Service in NT service mode is by default running under the LocalSystem account, which is restricted to operations on the machine on which it is installed but has no login credentials associated with it and therefore has no rights to access any network objects. If you need to access a network share in a scheduled task running as NT service, the Sync Service needs appropriate login credentials to impersonate a logon user. Otherwise, an error 'Local folder 'xxx' does not exist will occur when the task is executed.

Fig. Dialog for managing network logon accounts

Steps to configure for network share access are outlined as follows:

1. Set up a list of login accounts in TurboFTP. Open dialog 'Credentials for Sync Service' through the [Tools] menu. Here you can store account names and passwords for Sync Service to access the network share.

(IMPORTANT: Although TurboFTP stores the credentials in a highly secure form, for the sake of maximum security, we suggest you select the option 'Do not store password on computer', so that the password is cached in system memory only while TurboFTP Sync Service is running. Each time you hit the Close & Save button in the Credentials for Sync Service dialog while Sync Service is running, you will be prompted to enter the password for each account in use if it is missing.

In addition, it is suggested you create an account for the use of Sync Service, which has only the access rights you need to get the job done. Such an account you can delete it any time.)

2. Assign the logon account to the scheduled task. Go to [Schedule Task Settings | Advanced] use the Logon Account drop-down list to select the account you want.

Entries in the credential list are displayed in UPN format, user@DNS_domain_name. If you don't specify the domain name when creating an entry, it will default to ".", which means the account will be validated using only the local account database.

The selected login account is an account you can use to log onto the Windows system interactively. Note that when Local folder in [Schedule Task Settings | General] refers to a network share that must be in UNC format, e.g., \\server\path. Don't use network-mapped drive letters.

If the network share is on a member of NT or Active Directory domain, you should make sure the logon user account has required access rights to it. Since the domain has an authentication system that allows single sign-on, the logon user's security context will be applied when TurboFTP Sync Service attempts to access the network share with no more new authentication required. However, if the network share is not on a member of NT or Active Directory domain, you need to follow the instructions in Step 3.

3.   If the network share is not on a member of NT or Active Directory domain, for instance, is an SMB/CIFS share on a NAS device; it may require a user/password pair to access. If so, you need to provide the user and password by using the button [Schedule Task Settings | Advanced | SMB Share Login].