topic CIFS: NTFS Files/Folders - Take Ownership/Amend Permissions in ONTAP Discussions

CIFS: NTFS Files/Folders - Take Ownership/Amend Permissions

tyrone_owen_1 — Wed, 30 May 2018 15:37:30 GMT

Hi,

Is it possible to change the ownership and amend permissions on NTFS files and folders via the NetApp CLI (ONTAP 9)?

Thanks,

Re: CIFS: NTFS Files/Folders - Take Ownership/Amend Permissions

GidonMarcus — Thu, 31 May 2018 14:35:50 GMT

Hi.

yes. it's not straightforward. but you can use two methods.

1. creating and apply a policy with "vserver security file-directory"

2. applying a GPO on the SVM AD OU that specify new permission on the path and enable it with "vserver cifs group-policy" on the filer (i think this option is more GUI friendly)

Gidi

Re: CIFS: NTFS Files/Folders - Take Ownership/Amend Permissions

wareer — Fri, 03 Jan 2025 01:43:34 GMT

Create an NTFS security descriptor.
vserver security file-directory ntfs create -vserver svm_name -ntfs-sd ntfs_security_descriptor_name -owner owner_name -group primary_group_name -control-flags-raw raw_control_flags
Add DACLs to the NTFS security descriptor.
vserver security file-directory ntfs dacl add -vserver svm_name -ntfs-sd ntfs_security_descriptor_name -access-type {deny|allow} -account account_name -rights {no-access|full-control|modify|read-and-execute|read|write} -apply-to {this-folder|sub-folders|files}
Create a file/directory security policy.
vserver security file-directory policy create -vserver svm_name -policy-name policy_name
Below is the specific official link you can refer to：Configure NTFS file permissions using the ONTAP CLI