topic Re: SnapLock and Windows Access Permissions in ONTAP Discussions

SnapLock and Windows Access Permissions

netapphamburg — Thu, 05 Jun 2025 07:27:53 GMT

Hello together,

we have a NetApp Snaplock Volume (SnapLock Compliance) for archiving. The Filer works in a Windows Domain via CIFS.

Now, we want to change the name of the Windows domain. Is this possible? And what I must do that the access permission of the existing files on the filer will match with the new domain (new SIDs)?

Thanks a lot!

Joerg

Re: SnapLock and Windows Access Permissions

radek_kubka — Tue, 19 May 2009 15:52:30 GMT

Hi,

I am fairly sure you can't do anything with regards to ACLs or updating SIDs - the volume is in essence in a WORM mode (enforced by NetApp hardware), so changing anything within the volume is not doable.

regards,

Radek

Re: SnapLock and Windows Access Permissions

watan — Tue, 19 May 2009 20:34:53 GMT

Unfortuntely it looks like you won't be able to do anything to change the permissions once WORM is set on the file. The users/groups that exist on the file need to remain throughout the retention period or the file may become inaccessible.

A workaround to this prior to enabling snaplock to a volume would be to set the "Everybody" access to the files and control access from the cifs shares.

Re: SnapLock and Windows Access Permissions

netapphamburg — Wed, 20 May 2009 11:41:43 GMT

Thanks for this answers!

Could it be also possible, to map the domain new user to the old user-SID?