Connect Page Error Essentials 2016 Upgrade
January 3, 2017 8 Comments
This post comes as a follow up to this thread opened in the TechNet forum.
It seems after an in place upgrade from Essentials 2012 R2 that some things don’t function as expected.
When you visit http://server/connect you are presented with an error.
Viewing the same path from the server desktop you get the corresponding error.
We can see this is a permissions error.
Comparing the permissions of the folder in question (c:\programData\Microsoft\Windows Server\Logs) with my upgraded version to a default install of 2016 Essentials we can see that ‘Network Service’ is allowed Read/Write permission on the folder, and the upgraded folder does not have this permission set.
Adding those permissions in solves the issue and lets the page load as expected.
However, we can also see that another entry on the default 2016 ACL is shown. WseNTfSvc which also has Read and Write to the Logs folder.
Using some PowerShell to compare NTFS permissions from the Upgraded Essentials install to the Default one, there are some additional differences with some folders just having SYSTEM and BUILTIN\Administrators with Full Control, but no other locations mentioning the WseNTfSvc account in these locations or their subfolders:
- C:\ProgramData\Microsoft\Windows Server
- C:\Program Files\Windows Server
- C:\Program Files (x86)\Windows Server
The WseNTfSvc account seems to be a service account, but not one I can locate! I will attempt to update this post when I have some more info on what it is and what it is doing.
Having asked some of the cleverest folks I know, I can now say that this WseNTfSvc is actually a Service, not a service account or a virtual account. I suppose the fact it has the letters Svc in the name should have been some clue.