Setting Access Control Lists And Share Level Permissions On Dsfs; Cifs Storage Administrator Account; Active Directory Configuration; Setting Acls Or Slps On A Cifs Share - Dell PowerVault NX3500 Administrator's Manual

Setting Access Control Lists and Share Level
Permissions on DSFS
This section provides information about setting up access control lists
(ACLs) and share level permissions (SLP) on Dell Scalable File System
(DSFS). It is recommend that a Windows administrator follow the best
practices as defined by Microsoft.
Both ACLs and SLPs are supported by DSFS. However, SLPs are limited as
they only address full control, change and read rights for any given user or
group. You cannot use SLP and ACLs at the same time.

CIFS Storage Administrator Account

A built-in local CIFS storage administrator account serves the primary
purpose of setting ownership of the CIFS share. The account can also be used
to set ACLs when the NAS service is not joined to an Active Directory
domain. This built-in account has a randomly generated password for security
purposes. You must change this password before attempting to set any ACLs
or SLPs.

Active Directory Configuration

DSFS has the ability to join an Active Directory domain. This can be done
using the NAS Manager or the CLI. For more information, see
"Synchronizing PowerVault NX3500 With a Local NTP Server" on page 122.

Setting ACLs or SLPs on a CIFS Share

The first time a CIFS share has been created, the owner of the share must be
changed prior to setting any ACLs or attempting to access this share. If the
PowerVault NX3500 is joined to an Active Directory domain, the following
methods can be used for setting ACLs.
• Using an Active Directory domain account that has its primary group set as
the Domain Admins group.
• Mapping a network drive to the CIFS share where ACLs are intended to be
set.
Using Volumes, Shares, and Quotas
87