Environment
log archive server
Security manager 6x
Situation
Resolution
To test this, follow these steps:
- Go to the properties\security of the archive volume
- Add some local groups
- Remove the administrator and onepointconfigadmin
- Open the log archive configuration tool
- Modify one of the log archives
- Click yes on the ?Do you want to set the access control on the log archive for authorized local computer groups? popup box
- Restart the LAS service
Subsequently only the Administrators, OnePointOpConfigAdmins, and OnePointOpSystem should show up under the security tab of the archive volume.
Cause
It sets the ACL for the log archive volume. If you click yes it will explicitly set the ACL to allow access for three local groups: Administrators, OnePointOpConfigAdmins, and OnePointOpSystem. If you go to the properties of the archive volume\security tab, those three groups should be the only ones in the list. If there was previously another group in the list, clicking yes will remove it.
If you click no, the groups that are currently in the ACL of the log archive volume properties security tab will remain in place.