Creating local groups on the filer

About local groups  

You can define a local group on the filer that consists of users or global groups from any trusted domains. Members of a local group can be given access to files and resources.

Membership in certain well-known local groups confers special privileges on the filer. For example, members of BUILTIN\Power Users can manipulate shares, but have no other administrative capabilities.

How to create a local group  

You can create a local group on the filer only from User Manager or Microsoft Management Console.

How clients display local groups  

CIFS clients display the name of a local group in one of the following formats:

• FILERNAME\localgroup
• BUILTIN\localgroup

How SnapMirror works with local groups  

If you use the SnapMirror feature to copy a volume to another filer and the volume has an ACL for a local group, the ACL does not apply on the mirror. This is because the group is local to the source filer. Because the mirror is a read-only volume and you cannot change ACLs or permissions on it, do not use local groups in ACLs for files to be replicated by SnapMirror.

If you want to use local groups in ACLs for files to be replicated by SnapMirror, you can do this using the MultiStore^TM product. For more information about the MultiStore product, see the MultiStore Management Guide.

Creating a local group or adding users to a local group  

To create a local group or add users to a local group, complete the following steps.

Step	Action
1	From the User menu in User Manager, choose Select Domain.
2	In the Domain field, enter the following: \\filername
3	Click OK.
4	If you want to...	Then...
	Create a local group	Go to Step 5.
	Add members to an existing local group	Go to Step 7.
5	From the User menu, choose New Local Group.
6	Create a local group on the filer as you would on a Windows server. Example The following figure illustrates the creation of a group named Writers.
7	Add users to the local group as you would on a Windows NT server. Example The following figure illustrates adding a user named aimee in the LAB domain to the Writers group.

Deleting a local group or removing members from a local group  

To delete a local group or remove members from a local group, complete the following steps.

Step	Action
1	From the User menu in User Manager, choose Select Domain.
2	In the Domain field, enter the following: \\filername
3	Click OK.
4	If you want to...	Then...
	Delete a local group	Go to Step 5.
	Remove members from a local group	Go to Step 7.
5	Select the local group you want to delete.
6	From the User menu, choose Delete. Example The following figure illustrates how to delete a group named Writers.
7	Remove members from a local group as you would on a Windows NT server. Example The following figure illustrates how to remove the user named aimee in the LAB domain from the Writers group.

Copyright © 1994-2003, Network Appliance, Inc. All rights reserved.
Part No. 210-00473
File: cifs26.htm
Last updated: 11/25/03 18:02:42