Resource Access

Before starting the deployment, create additional shared folders in which to store the user state migration data and the deployment logs. You can create these shared folders on any server that is accessible to destination computers. Refer to your deployment plan to guide you on server placement. The following list describes the shared folders you should create:

• MigData Stores the user state migration data during the deployment process
• Logs Stores the deployment logs during the deployment process

Note MigData and Logs are recommended shared folder names. You can use any name for these shared folders; however, the remainder of this tutorial refers to these shared folders by these names.

During deployment to destination computers, the MDT 2010 deployment scripts connect to the deployment shares and shared folders. Create accounts for use by these scripts when accessing these resources.

After creating the additional shared folders, configure the appropriate shared folder permissions. Ensure that unauthorized users are unable to access user state migration information and the deployment logs. Only the destination computer creating the user state migration information and the deployment logs should have access to these folders.

For each shared folder, disable inheritance and remove existing permissions. Then give the domain Computers group the Create Folder/Append Data permission for each folder only, and do the same for the domain Users group. Also, add the Creator Owner group to each shared folder, giving it the Full Control permission for subfolders and files only. Also, give each group that will have administrator access to migration data and log files the same permissions.

The permissions that you set in these steps allow a target computer to connect to the appropriate share and create a new folder in which to store user state information or logs. The folder permissions prevent other users or computers from accessing the data stored in the folder.