https://community.netapp.com/t5/ONTAP-Discussions/Default-Security-Descriptor-on-CIFS-Volume/m-p/462296#M45092 <P>I'm using Ontap 9.15 and I have an long existing home directory sitting on a CIFS Flexvol. It hosts Ontap home directories in <EM><STRONG>NTFS</STRONG> </EM>security style accessed from windows 10 machines. . There are around 10million files on it.&nbsp;The NTFS permissions were set by sharing out the volume to admins and setting the NFTS DACLS via windows.</P><P><BR />I'm looking to <EM><STRONG>alter</STRONG> </EM>the permissions on it using the Ontap CLI (<A href="https://docs.netapp.com/us-en/ontap-cli/vserver-security-file-directory-apply.html#:~:text=The%20vserver%20security%20file%2Ddirectory,ACLs%20to%20files%20or%20folders." target="_blank" rel="noopener">vserver security file-directory apply</A>) but when I look for the security descriptor one does not exist.&nbsp;</P><P>&nbsp;</P><P>Is a security descriptor not created by virtue of creating the DACL in windows?&nbsp;</P> Mon, 28 Jul 2025 11:58:24 GMT shocko 2025-07-28T11:58:24Z https://community.netapp.com/t5/ONTAP-Discussions/Default-Security-Descriptor-on-CIFS-Volume/m-p/462296#M45092 <P>I'm using Ontap 9.15 and I have an long existing home directory sitting on a CIFS Flexvol. It hosts Ontap home directories in <EM><STRONG>NTFS</STRONG> </EM>security style accessed from windows 10 machines. . There are around 10million files on it.&nbsp;The NTFS permissions were set by sharing out the volume to admins and setting the NFTS DACLS via windows.</P><P><BR />I'm looking to <EM><STRONG>alter</STRONG> </EM>the permissions on it using the Ontap CLI (<A href="https://docs.netapp.com/us-en/ontap-cli/vserver-security-file-directory-apply.html#:~:text=The%20vserver%20security%20file%2Ddirectory,ACLs%20to%20files%20or%20folders." target="_blank" rel="noopener">vserver security file-directory apply</A>) but when I look for the security descriptor one does not exist.&nbsp;</P><P>&nbsp;</P><P>Is a security descriptor not created by virtue of creating the DACL in windows?&nbsp;</P> Mon, 28 Jul 2025 11:58:24 GMT https://community.netapp.com/t5/ONTAP-Discussions/Default-Security-Descriptor-on-CIFS-Volume/m-p/462296#M45092 shocko 2025-07-28T11:58:24Z https://community.netapp.com/t5/ONTAP-Discussions/Default-Security-Descriptor-on-CIFS-Volume/m-p/463168#M45155 <P>Hope this helps.</P><P>&nbsp;</P><P><A href="https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/What_are_the_corresponding_NTFS_security_descriptor_DACL_entries_between_Windows_ONTAP_and_PST" target="_blank">https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/What_are_the_corresponding_NTFS_security_descriptor_DACL_entries_between_Windows_ONTAP_and_PST</A><BR /><A href="https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/When_should_ACLs_be_created_or_modified_from_the_NetApp_CLI" target="_blank">https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/When_should_ACLs_be_created_or_modified_from_the_NetApp_CLI</A></P><P>&nbsp;</P><P><STRONG>NetApp recommends:</STRONG> Use of the Windows 'Security' tab whenever possible.</P> Tue, 16 Sep 2025 14:30:30 GMT https://community.netapp.com/t5/ONTAP-Discussions/Default-Security-Descriptor-on-CIFS-Volume/m-p/463168#M45155 Ontapforrum 2025-09-16T14:30:30Z