Novell Documentation: ZENworks 6.5 - Understanding File System Rights to the NAL Cache in ZENworks 6.5 and in ZENworks 6.5 Support Pack 1 (SP1)

Understanding File System Rights to the NAL Cache in ZENworks 6.5 and in ZENworks 6.5 Support Pack 1 (SP1)

Because of changes to provide improved security in ZENworks 6.5 Support Pack 1 (SP1), you might notice some different behavior regarding file system rights and the NAL cache.

The following sections contain additional information:

File System Rights to the NAL Cache using ZENworks 6.5

In the initial release of ZENworks 6.5, the ZENworks Desktop Management Agent installation program created the NAL cache directory (typically, c:\nalcache) and automatically assigned the user Full Control access.

As a result, if you installed the Desktop Management Agent on a workstation, even a locked-down workstation, the installation program created the NAL cache directory and assigned Full Control access, which allowed Novell Application Launcher to access the NAL cache without further modifications to file system rights.

File System Rights to the NAL Cache using ZENworks 6.5 SP1

In ZENworks 6.5 SP1, the ZENworks Desktop Management Agent installation program no longer assigns the user any file system rights to the NAL cache directory (typically, c:\nalcache). Instead, the NAL cache directory inherits whatever rights are assigned to the root of the drive, assuming you use the default location (c:\nalcache). In order for users to be able to access the NAL cache, they need at least Read rights to the NAL cache directory.

As a result of this change, consider the following:

When you install the ZENworks Desktop Management Agent that comes with ZENworks 6.5 SP1 on workstations that already have the Management Agent in place, you should not experience any NAL cache file system access problems. The original installation created the NAL cache directory with Full Control rights, and the upgrade continues using these same rights.
When you install the ZENworks Desktop Management Agent that comes with ZENworks 6.5 SP1 on a workstation that did not have the previous version of the agent installed, the installation program does not assign any file system rights to the NAL cache directory; it inherits whatever rights are assigned to the root of the drive.
As a result, users might experience problems accessing the NAL cache on locked-down workstations. For example, if users do not have at least Read rights to the root of the drive, they cannot access the NAL cache directory and Novell Application Launcher cannot use the cache.
If you manually created the NAL cache directory and assigned rights before installing the ZENworks Desktop Management Agent or if you changed rights to an existing directory, these rights remain in effect after installation. Be aware that the user needs at least Read rights to the NAL cache, or Novell Application Launcher cannot use the cache.