Hi folks,
I have run into some ntfs permission problems on a filer running 8.0.1 7-Mode. I am not a Windows domain admin, just the filer admin. I thought that I could map the share using the filer Administrator account like this:
share: \filer.virginia.edu\sharename
user: filer.virginia.edu\Administrator
I can login just fine, but this account apparently has no special admin privileges. I get permission denied when I try to access folders whose ntfs permissions I suspect are wrong. I also tried filer.virginia.edu\root but login fails. So does this mean that only Windows Domain admins can repair these permissions? And what about this filer option:
wafl.nt_admin_priv_map_to_root
Must this be "on" ?
What do you do if someone revokes all access to a ntfs style folder?
Is there any way for a filer admin who is not a Windows domain admin to get unrestricted access to all ntfs security style objects? Can a Windows domain admin even do this?
I searched Netapp support but it just says to login as a user "with enough privilege" to change the permissions.
Thanks for any help. We almost always use Unix security style.
Hello,
What is your qtree security setting for this share?
Chris
-----Original Message----- From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of scl@virginia.edu Sent: Thursday, April 10, 2014 9:52 AM To: toasters@teaparty.net Subject: admin access to ntfs permissions
Hi folks,
I have run into some ntfs permission problems on a filer running 8.0.1 7-Mode. I am not a Windows domain admin, just the filer admin. I thought that I could map the share using the filer Administrator account like this:
share: \filer.virginia.edu\sharename
user: filer.virginia.edu\Administrator
I can login just fine, but this account apparently has no special admin privileges. I get permission denied when I try to access folders whose ntfs permissions I suspect are wrong. I also tried filer.virginia.edu\root but login fails. So does this mean that only Windows Domain admins can repair these permissions? And what about this filer option:
wafl.nt_admin_priv_map_to_root
Must this be "on" ?
What do you do if someone revokes all access to a ntfs style folder?
Is there any way for a filer admin who is not a Windows domain admin to get unrestricted access to all ntfs security style objects? Can a Windows domain admin even do this?
I searched Netapp support but it just says to login as a user "with enough privilege" to change the permissions.
Thanks for any help. We almost always use Unix security style. _______________________________________________ Toasters mailing list Toasters@teaparty.net http://www.teaparty.net/mailman/listinfo/toasters
If you want to rip and replace permissions for an entire volume, you can use fsecurity apply There is a walkthrough of using it here: https://kb.netapp.com/support/index?page=content&id=1011734
you can use fsecurity show <path> to view permissions from the console. if you need to fix specific subdirectories, then you need a tool that can run as backup operator or you have to do the old take ownership and reset all permissions from here down.
You don't need to be a domain admin for anything I can think of (and it wouldn't help you anyways) - you just need to be in the NetApps local Administrators group.
mark
-----Original Message----- From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of scl@virginia.edu Sent: Thursday, April 10, 2014 8:52 AM To: toasters@teaparty.net Subject: admin access to ntfs permissions
Hi folks,
I have run into some ntfs permission problems on a filer running 8.0.1 7-Mode. I am not a Windows domain admin, just the filer admin. I thought that I could map the share using the filer Administrator account like this:
share: \filer.virginia.edu\sharename
user: filer.virginia.edu\Administrator
I can login just fine, but this account apparently has no special admin privileges. I get permission denied when I try to access folders whose ntfs permissions I suspect are wrong. I also tried filer.virginia.edu\root but login fails. So does this mean that only Windows Domain admins can repair these permissions? And what about this filer option:
wafl.nt_admin_priv_map_to_root
Must this be "on" ?
What do you do if someone revokes all access to a ntfs style folder?
Is there any way for a filer admin who is not a Windows domain admin to get unrestricted access to all ntfs security style objects? Can a Windows domain admin even do this?
I searched Netapp support but it just says to login as a user "with enough privilege" to change the permissions.
Thanks for any help. We almost always use Unix security style. _______________________________________________ Toasters mailing list Toasters@teaparty.net http://www.teaparty.net/mailman/listinfo/toasters
-
Chris Skeans -
scl＠virginia.edu -
Weber, Mark A