How do I change a share's effective security style to NTFS on a volume in a mixed mode qtree?

[sgieveach]

How do I change the effective security style on a CIFS share from unix:

____________________________________________

na01a> fsecurity show /vol/nas01/shares/Bioarchive
[/vol/nas01/shares/Bioarchive - Directory (inum 97)]
  Security style: Mixed
  Effective style: Unix

  DOS attributes: 0x0010 (----D---)

  Unix security:
    uid: 0 (root)
    gid: 0
    mode: 0755 (rwxr-xr-x)

  No security descriptor available.
na01a>

____________________________________________

to NTFS:

____________________________________________

na01a> fsecurity show /vol/nas02/shares/IT
[/vol/nas02/shares/IT - Directory (inum 12249468)]
  Security style: Mixed
  Effective style: NTFS

  DOS attributes: 0x0010 (----D---)

  Unix security:
    uid: 0 (root)
    gid: 0
    mode: 0777 (rwxrwxrwx)

  NTFS security descriptor:
    Owner: BUILTIN\Administrators
    Group: BUILTIN\Administrators
    DACL:
      Allow - addomain\useracctx - 0x001301bf (Modify) - OI|CI
      Allow - addomain\useraccty - 0x001f01ff (Full Control) - OI|CI
      Allow - addomain\useracctz - 0x001f01ff (Full Control) - OI|CI
    SACL:
      All     - addomain\Domain Users - 0x00050047 - OI|CI (Inherited)
na01a>

____________________________________________

[aborzenkov]

If you mean “effective security style of a file” – you can’t. That is how mixed security style works – it remembers last change of ACLs, so to make it remember Windows ACLs you need to do it from Windows. It may be possible to use smbclient from Unix to simulate Windows access though.

In general mixed security is almost never what people really want.