Data Access: Using QBDBSM to Manage Folder Permissions and Access

QuickBooks Database Server Manager (QBDBSM) configures and monitors shared folders on your host server so multi-user networks function smoothly. When workstations cannot open a company file or encounter access denied warnings, incorrect folder permissions are usually the cause. Scanning your data folders with QBDBSM automatically grants the local database service account the necessary Windows permissions to create network locks, read transactions, and maintain file integrity.

Fast-Fix: Configure Folder Permissions with QBDBSM

To configure folder permissions using QBDBSM, open the tool on the host server, go to the Scan Folders tab, click Add Folder, and select your company file directory. Click Start Scan. This scan automatically grants full access permissions to the local QBDataServiceUser account and generates updated .ND network descriptor files. In Windows, ensure the shared folder also grants Full Control permissions to authenticated network users.

---

Quick Status & Triage Snapshot

• Data Risk Tier: Low (adjusting folder sharing permissions and rescanning directories does not modify internal financial transactions).
• Multi-User Impact: Critical (restrictive folder permissions prevent multiple client computers from accessing the database simultaneously).
• Common Trigger: Moving company files to a new drive, Windows operating system security updates, or restoring files from an external backup drive.
• Estimated Fix Time: 10 to 15 minutes.

---

Technical Anatomy: How Windows Permissions Interact with QBDBSM

QuickBooks Desktop requires two distinct permission layers on the host computer:

1. Share-Level Permissions: Determine who can reach the folder over your local area network (LAN).
2. NTFS Security Permissions: Determine what users and system services can do to the files stored on the local hard drive (Read, Write, Modify, Execute).

When QBDBSM runs as a background service, it does not log in as an administrator. It runs under a dedicated, low-privilege service account created during installation:

• QuickBooks 2026: QBDataServiceUser36
• QuickBooks 2025: QBDataServiceUser35
• QuickBooks 2024: QBDataServiceUser34

If this service user lacks Full Control over the target directory, it cannot create temporary lock files or edit the .ND file. Workstations trying to log in will be blocked by verification errors.

For additional details on folder security architecture, refer to Data Security: How to Set Up QuickBooks Folder Sharing Permissions.

---

Diagnostic Flowchart: Folder Permission Verification

Start: Workstation receives "Access Denied" or Error 6000
 │
 ├── Can the user create and delete a new text file inside the network folder?
 │    ├── No  -> Share or NTFS permissions are too restrictive for network users.
 │    │          (Set Windows Share & NTFS security to Full Control).
 │    └── Yes -> Network users have access; check service-level permissions.
 │
 └── Does QBDBSM successfully scan the folder without errors?
      ├── No  -> Run QBDBSM as Administrator, add missing QBDataServiceUser permissions.
      └── Yes -> Folder permissions are valid; inspect firewall and database services.

---

Step-by-Step Guide: Managing Folder Permissions with QBDBSM

Step 1: Scan the Company Directory with QBDBSM

Running a folder scan inside QBDBSM is the easiest way to align your directory with QuickBooks requirements:

1. On the host computer or server, click the Start menu.
2. Type QuickBooks Database Server Manager and launch the program.
3. Switch to the Scan Folders tab.
4. If your company data folder is not listed, click Add Folder and select the directory (for example, D:\QuickBooksData).
5. Click Start Scan.
6. When the scan finishes, verify that the status column reads Complete and your company file (.qbw) appears in the list.

If the scan reports a failure during testing, see Network Diagnostics: Resolving “Network Diagnostics Failed” in QBDBSM.

Step 2: Set Share-Level Permissions in Windows

Network users must be authorized to enter the shared folder from across the local network:

1. Open File Explorer on the host server and locate your company data folder.
2. Right-click the folder and select Properties.
3. Go to the Sharing tab and click Advanced Sharing.
4. Check the box for Share this folder.
5. Click the Permissions button.
6. Verify that Everyone (or your designated Active Directory security group) is added.
7. Check the boxes for Full Control, Change, and Read under the “Allow” column.
8. Click Apply, then OK.

Step 3: Configure Windows NTFS Security Permissions

Even if network sharing is open, Windows NTFS permissions will block connections if the database service account is excluded:

1. In the same folder Properties window, go to the Security tab.
2. Click Edit to change permissions.
3. Verify that the following accounts are listed and have Full Control checked:
   • SYSTEM
   • Administrators
   • Everyone (or authenticated domain users)
   • QBDataServiceUserXX (matching your software version)
4. If QBDataServiceUserXX is missing:
   • Click Add.
   • Under “Enter the object names to select,” enter your specific user name (e.g., QBDataServiceUser36).
   • Click Check Names.
   • Click OK and check Full Control.
5. Click Apply and OK.

Step 4: Propagate Permissions to Child Files

If your company file was copied into the directory after the folder was created, it might not inherit parent security settings:

1. On the Security tab of the folder properties, click Advanced.
2. At the bottom of the window, check Replace all child object permission entries with inheritable permission entries from this object.
3. Click Apply. Windows will update permissions across all .qbw, .tlg, and .nd files inside the folder.
4. Click OK.

For background on installing and configuring the manager tool, consult the QBDBSM Guide: How to Install and Configure Database Server Manager.

---

Verifying Workstation Access

After updating folder permissions and scanning the directory with QBDBSM:

1. Go to a client workstation.
2. Confirm the network share is mapped to a consistent drive letter. If you have not configured persistent drive letters, follow File Access: How to Map a Network Drive for QuickBooks Company Files.
3. Open QuickBooks, choose Open or restore an existing company, and open the file through the mapped path.
4. If connection errors continue, review Verification Failure: Troubleshooting Database Connection Errors.

---

Closing the Books

Configuring proper folder access permissions with QBDBSM ensures the host operating system permits both human users and background database services to communicate without blocks. Running regular scans whenever company files are relocated or added keeps your network descriptor files accurate and your multi-user network running reliably.