Take a look at https://now.netapp.com/eservice/toolchest?toolid=249
I use the na_ntfschown to set ownership on our users' personal storage folders so that quotas will work properly. Our security model only allows administrators to take ownership. I run a "for" loop that matches the folder names to the userid's and set the ownership (recursively) based on that. There are 3 other utilities in the package. We are 100% NTFS security model and it works well. The account I use is full admin on the filer, but might work with lesser permissions. Previously I had used subinacl, but I found the NetApp tools to be cleaner and faster. ----- Original Message ----- From: Jimmy Corncrake To: toasters@mathworks.com Sent: Friday, August 03, 2007 7:43 AM Subject: Using Subinacl for CIFS ACL changes
Hi,
We are attempting to make alterations to our file and directory ACLs using the microsoft utility Subinacl.exe. All attempts to use this utility under an account which has anything less than Administrative status on the Filer fail. For example running the following command subinacl /subdirectories \sharesfiler\adm$ /display - with an account which has Power User & Backup Operator group membership on the Filer returns an error message - CreateFile Error : 1314 A required privilege is not held b y the client.
The account the command is being run under has both Full Control on the share and the ACL. If we use other MS utilities to perform the same function such as cacls, xcalcs or the windows GUI we can view and alter all ACLs without the need to grant the account Administative status. This implies that the access permissions are sufficient and therefore there is something subinacl is doing that is different to other tools designed for the same purpose. Upgrading the account priveleges to Administrator overcomes this problem but this is not an option except in our test environment. This behaviour is consistant on Ontap 6.5.7, 7.0.5, 7.0.6 and 7.2.2 implying that its not a release bug.
Has anyone else come across this behaviour before or have any idea what subinacl is doing that the other tools do not?
Your assistance will be appreciated.
rgds,
Oisin