Hello; There is a utility we use (non GUI, but I'm mentioning it anyways as we've been so pleased with it) to modify ACLs. It is called "NTSec" and is from a company called "Pedestal" (http://www.pedestalsoftware.com/). Allows you to backup up ACLs from folder sets (very useful for restoring these setting should a user with too much privilege mess things up) and other things too. Also allows you to swap users, so will replace user A with user B for any individual access they may have... Anyways, I ramble... :)

Cheers, -Adrian

-----Original Message----- From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com]On Behalf Of Warkentin, Grant Sent: Wednesday, March 23, 2005 10:05 AM To: toasters@mathworks.com Subject: RE: Needed: A tool for editing CIFS ACLs

Thanks. Unfortunately our IT security department has mandated that a whole bunch of stuff be turned on under CIFS audit. This makes these logs mostly useless to us. Too much data.

Cacls would work - been wanting to create a less dangerous substitute for ntfschown[1] for file ownership modifications. Still prefer to find a GUI utility for the other admins here.

1. A utility I downloaded from now.netapp. It works well if used properly and can cause a whole mess of trouble if not used properly.

NOTICE - This communication is intended ONLY for the use of the person or entity named above and may contain information that is confidential or legally privileged. If you are not the intended recipient named above or a person responsible for delivering messages or communications to the intended recipient, YOU ARE HEREBY NOTIFIED that any use, distribution, or copying of this communication or any of the information contained in it is strictly prohibited. If you have received this communication in error, please notify us immediately by telephone and then destroy or delete this communication, or return it to us by mail if requested by us. The City of Calgary thanks you for your attention and cooperation.

-----Original Message----- From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Holland, William L Sent: Wednesday, March 23, 2005 10:34 AM To: 'toasters@mathworks.com' Subject: RE: Needed: A tool for editing CIFS ACLs

CIFS security auditing is already a part of the CIFS protocal and configured through options cifs. You can use CACLS (part of the Windows OS) in scripts to manage the ACLs as well.

-----Original Message----- From: owner-toasters@mathworks.com [mailto:Grant.Warkentin@calgary.ca] Sent: Wednesday, March 23, 2005 12:18 PM To: toasters@mathworks.com Subject: Needed: A tool for editing CIFS ACLs

Question: Can anyone recommend a 3rd party tool for editing CIFS ACLs on an FAS960.

We need: 1. An audit trail. 2. The ability to add additional ACLs without changing the existing ACLs on a folder.

Currently we are using FSA (File Security Administrator) by NetIQ on our regular servers. This product needs to run an agent on the server so it's no good for filers. I have been looking at Security Explorer by Script Logic. Some information I have on this product is "We are currently working with Net App to overcome some issues with Compatibility."

Do you know of any other programs besides these two?

TIA.

Grant Warkentin System Administrator II City of Calgary - Information Technology Mail Drop == 8245 Ph: (403) 268-5629 Fax: (403) 268-2546

NOTICE - This communication is intended ONLY for the use of the person or entity named above and may contain information that is confidential or legally privileged. If you are not the intended recipient named above or a person responsible for delivering messages or communications to the intended recipient, YOU ARE HEREBY NOTIFIED that any use, distribution, or copying of this communication or any of the information contained in it is strictly prohibited. If you have received this communication in error, please notify us immediately by telephone and then destroy or delete this communication, or return it to us by mail if requested by us. The City of Calgary thanks you for your attention and cooperation.