CIFS: NTFS Files/Folders - Take Ownership/Amend Permissions

[tyrone_owen_1]

Hi,

Is it possible to change the ownership and amend permissions on NTFS files and folders via the NetApp CLI (ONTAP 9)?

Thanks,

[GidonMarcus]

Hi.

yes. it's not straightforward. but you can use two methods.

1. creating and apply a policy with "vserver security file-directory" 

2. applying a GPO on the SVM AD OU that specify new permission on the path and enable it with "vserver cifs group-policy" on the filer (i think this option is more GUI friendly)

Gidi

[wareer]

1. Create an NTFS security descriptor.

   vserver security file-directory ntfs create -vserver svm_name -ntfs-sd ntfs_security_descriptor_name -owner owner_name -group primary_group_name -control-flags-raw raw_control_flags

2. Add DACLs to the NTFS security descriptor.

   vserver security file-directory ntfs dacl add -vserver svm_name -ntfs-sd ntfs_security_descriptor_name -access-type {deny|allow} -account account_name -rights {no-access|full-control|modify|read-and-execute|read|write} -apply-to {this-folder|sub-folders|files}

3. Create a file/directory security policy.

   vserver security file-directory policy create -vserver svm_name -policy-name policy_name

   Below is the specific official link you can refer to：Configure NTFS file permissions using the ONTAP CLI