topic Re: ETC$ Access is denied error in ONTAP Discussions

ETC$ Access is denied error

tyrone_owen_1 — Wed, 04 Jun 2025 15:21:13 GMT

I've have problems writing to the etc$ folder, with 'Access is denied' and 'You need permissions to perform this action'

I have created a local account which is a member of the array's Administrator group
The adminstrator group has full control on the etc$ share
I've tried opening explorer on the Windows 2008 host as administrator and then connecting to etc$
I've tried opening explorer on the Windows 2008 host with my personl account which is a local admin on the server and then connecting to etc$
I've tried the above and then mapped a share using my array admin account
I've tried the above on a different server
On 1 out of 4 controllers I've had success by adding my domain account to the array's Administrator accounts, however as I said this only works on 1 out of 4
On the array where I have maned to read/write to etc$ the create_ucode=off, on the 'broken' arrays create_ucode=on - could this be the issue?
Below are the attributes of the broken array's vol0

> qtree status
Volume Tree Style Oplocks Status
-------- -------- ----- -------- ---------
vol0 unix enabled normal

>vol options vol0

root, diskroot, nosnap=off, nosnapdir=off, minra=off,
no_atime_update=off, nvfail=off, ignore_inconsistent=off,
snapmirrored=off, create_ucode=on, convert_ucode=off, maxdirsize=45875,
schedsnapname=ordinal, fs_size_fixed=off, guarantee=volume,
svo_enable=off, svo_checksum=off, svo_allow_rman=off,
svo_reject_errors=off, no_i2p=off, fractional_reserve=100, extent=off,
try_first=volume_grow, read_realloc=off, snapshot_clone_dependency=off,
dlog_hole_reserve=off, nbu_archival_snap=off

> cifs shares
Name         Mount Point                       Description
----         -----------                       -----------
HOME         /vol/vol0/home                    Default Share
                        everyone / Full Control
C$           /                                 Remote Administration
                        BUILTIN\Administrators / Full Control

etc$         /vol/vol0/etc
                        everyone / Full Control
                        BUILTIN\Administrators / Full Control

>exportfs

/vol/vol0 -sec=sys,rw=xxxxxx01:xxxxxx02,anon=0,nosuid

Thanks

Re: ETC$ Access is denied error

JGPSHNTAP — Thu, 09 Mar 2017 12:50:37 GMT

First, if you are more a windows guy than a *nix guy, I tend to have vol0 set to ntfs, therefore it will understand user permissions easier.

Also, check your builtin\administrators mapping to root.

This is our default setting for our 7-mode systems

options wafl.nt_admin_priv_map_to_root on

Re: ETC$ Access is denied error

tyrone_owen_1 — Thu, 09 Mar 2017 13:29:15 GMT

Thanks for the quick reply

3 out of 4 arrays sorted

The combination of wafl.nt_admin_priv_map_to_root on and given my AD account admin permissions worked, but only on 3 of the 4 controllers

The security style is also set to UNIX on all of the vol0 - good thought

Re: ETC$ Access is denied error

JGPSHNTAP — Thu, 09 Mar 2017 13:37:21 GMT

Ok, so let's see what's wrong with the last array...

Give us some more detail.

If the setting maps admin to root is set on the controller, just double check your account is there

Re: ETC$ Access is denied error

tyrone_owen_1 — Thu, 09 Mar 2017 13:45:48 GMT

Yes, my user account is there

> useradmin domainuser list -g Administrators
List of SIDS in Administrators
S-1-5-xxxxxxxxxxxxxx

> cifs lookup S-1-5-xxxxxxxxxxxxxx
name = xxx\xxxxxty [that's me]

> cifs shares etc$
Name         Mount Point                       Description
----         -----------                       -----------
etc$         /vol/vol0/etc
                        everyone / Full Control
                        BUILTIN\Administrators / Full Control

Re: ETC$ Access is denied error

tyrone_owen_1 — Thu, 09 Mar 2017 17:10:31 GMT

On the broken share I'm able to write to the home share and then ndmpcopy files into the etc folder. I can subsequently edit and delete those files - strange

Re: ETC$ Access is denied error

nick_cig — Wed, 11 Sep 2019 12:17:31 GMT

We had this issue recently and I'd performed all the checks listed above. Eventually we used sectrace to help identify the cause and it turned out to be FPOLICY.

The fix was to add the disk firmware extensions (.FVF and .LOD) to the list of permitted extensions and all was well.