You can specify GPO File System security settings directly on Data ONTAP file system objects (directories or files). These settings are propagated down the directory hierarchy; that is, when you set a GPO security setting on a directory, those settings are applied to objects within that directory.
Note
These File System security settings can only be applied in mixed or NTFS volumes or qtrees. They cannot be applied to a file or directory in a UNIX volume or qtree.
File System security ACL propagation is limited to about 280 levels of directory hierarchy.
The format of target file or directory names must be recognized by Data ONTAP and must be in one of the following forms:
When an absolute pathname is supplied, Data ONTAP applies File System security settings to the specified target file or files within the target directories. In this example, the settings are applied to the /home directory in the storage system root volume.
When a relative pathname is supplied (any pathname that does not begin with /vol), Data ONTAP applies File System security settings to any target file or directory containing the specified element. This is a convenient way to apply settings to multiple parallel targets in a single storage system; in this example, the settings are applied to all vFiler units with /home directories.
To create a File System security GPO, complete the following steps.
| 1 |
On the Windows server, open the Active Directory Users and Computers tree. |
| 2 |
Right-click the Organization Unit (OU) that contains the storage system. |
| 3 | |
| 4 | |
| 5 |
Highlight the new GPO and select Edit. Result |
| 6 |
Double-click Computer Configuration > Windows Settings > Security Settings. |
| 7 |
Right-click File System and select Add File. ResultThis opens the "Add a file or folder" dialog box. Note |
| 8 |
In the Folder field, enter the storage system path on which to apply the GPO and click OK. Result |
| 9 |
In the Database Security window, set the permissions you want and click OK. Result |
| 10 |
In the Add Object window, select the ACL inheritance you want and click OK. Result |
| 11 |
Close the Group Policy Editor and the OU Properties dialog box. |
| 12 |
On the storage system, enter the following command to retrieve and apply the new GPO: Note |
Copyright © 1994-2005, Network Appliance, Inc. All rights
reserved.
Part No. 210-01086_B0
File: 3cifs31.htm
Last updated: 08-Dec-2005 13:19:35
