NAS 8000 smb share permissions

[Martin Megele]

Hi,

i'm running a NAS8000 with User Level (Domain) Security for SMB (Windows) Shares. There are Windows NT Clients connected to the SMB share.

Does anyone know a way to asign permissions for the share itself?

[CA853265]

I do not believe that their are any permissions at the share level. All of the security is done at the file and folder level just like on a NTFS partition. It's a little odd to set up because by default the root folder is set to Everyone:Full Control and you can't change the root folders share permissions (at lease I can't find a way). If you wanted to make just one security change at that folder like you would do in NT, you need to create a seperate folder, share it, move your other folder into it, set the security on your folder, unshare the root folder and then share the child folder. It is a lot of work to set the security on that shared folder but it can be done...kinda.

ie.
.data
..folder 1
..folder 2
If data is your shared folder it's security will be set to Everyone Full control. Since it is shared you can't go any higher in the tree to change it's permissions. It is at the top of the tree...

.shared
..data
...folder 1
...folder 2
Now if you create a temporary share called "shared" and move your data folder into it, you can go into the shared folder and set the security on the data folder and all folders below it. Once that is complete, you stop the share on the "shared" folder and then create the SMB share of the "data" folder.

If there is another way of doing it, I do not know what it is. I have had to use this method in my organization for all of my shares and security settings.


If you are wondering how to set the security and don't care about the info above... It is just like in NT, go to the folder or file through your mapped drive or the url path. Right click on the file or folder and select the security tab. From there you can add or remove users access to the folder. This is the same method you would use with the tips above for your "shared" folder.