Creating a local Windows group

You can create local Windows groups that can be used for authorizing access to data contained in a Storage Virtual Machine (SVM) over an SMB connection. You can also assign privileges that define the user rights or capabilities that a member of the group has when performing administrative activities.

Before you begin

•	CIFS server must be configured for the SVM.

•	The cluster must be running Data ONTAP 8.2 or a later version in the 8.2 release family.

About this task

•	You can specify a group name with or without the local domain name.

The local domain is the name of the CIFS server for the SVM. For example, if the CIFS server name of the SVM is "CIFS_SERVER" and you want to create an "engineering" group, you can specify the group name as "engineering" or "CIFS_SERVER\engineering".

The following rules apply when using a local domain as part of the group name:

•	You can only specify the local domain name for the SVM to which the group is applied.

For example, if the local CIFS server name is "CIFS_SERVER", you cannot specify the following group name: "CORP_SERVER\group1".

•	You cannot use the BUILTIN term as a local domain in the group name.

For example, you cannot create a group named "BUILTIN\group1".

•	You cannot use an Active Directory domain as a local domain in the group name.

For example, you cannot create a group named "AD_DOM\group1" where "AD_DOM" is the name of an Active Directory domain.

•	You cannot use a group name that already exists.

•	The group name must meet the following requirements:

•	Must not exceed 256 characters

•	Must not end in a period

•	Must not include commas

•	Must not include any of the following printable characters: ", /, \, [, ], :, \|, <, >, +, =, ;, ?, *, @

•	Must not include characters in the ASCII range 1-31, which are non-printable

Steps

1.	From the home page, double-click the appropriate storage system.

2.	Expand the Storage Virtual Machines hierarchy in the left navigation pane.

3.	In the navigation pane, select the SVM and click Configuration > Local Users and Groups > Windows.

4.	In the Groups tab, click Create.

5.	Specify a name for the group and a description that helps you identify this new group.

6.	Assign a set of privileges to the group.

You can select the privileges from the predefined set of supported privileges.

7.	Click Add to add users to this group.

8.	In the Add Members window, do one of the following:

•	Specify the Active Directory user or Active Directory group to be added to a particular local group.

•	Select the users from the list of available local users in the SVM.

9.	Click Create.

Result

The local Windows group is created and is listed in the Groups window.

Related reference

Windows window