跳至主要內容
  • 簡單快速地下訂單
  • 檢視訂單及追蹤商品運送狀態
  • 建立並存取您的產品清單
部分文章編號可能已變更。如果這不是您要找的文章,請嘗試搜尋所有文章。搜尋文章

Dell EMC Unity: Receiving warning when trying to modify the NTFS permission on the root of the share folder (User Correctable)

摘要: Receiving warning message when trying to modify the NTFS permission on the root of the share folder.

本文章適用於   本文章不適用於 

症狀

User is receiving the below error when trying to modify the NTFS permission of a CIFS share in Windows explorer or Computer Management.
Remotely setting permissions on the folder at the root of the share removes all inherited permissions from the root folder and all subfolders. To set permissions without removing the inherited permissions, click No and either change the permissions on a child folder or make the change while logged in locally. Do you want to continue?
If the user chooses to apply, the original ACL is cleaned up, and only leaves the newly added ACE in the ACL.

For example, if the user wants to add a local administrator to the NTFS permission on a share, the original ACE Everyone is removed. 
 
image.png

After clicking yes, Everyone is removed and only Administrator is left in the ACL of the shared folder and its subfolders. No matter how many ACEs are configured in the Security tab, they are all removed if they are inherited permissions. 
 
image.png

原因

This is working as designed. It is expected to see this warning when modifying share permissions, no matter whether you are doing it using Windows Explorer or Computer Management. 

解析度

If the user wants to add explicit permission for certain users on the root folder of the share, it is recommended to do that by modifying the Share Permission from Windows Computer Management (compmgmt.msc). 

For example:
If the user wants to only allow user A to access the shared folder, they can remove everyone from the Share Permissions tab of the share in Computer Management and add user A with the wanted permission explicitly. 

Some users are exporting the subfolder of the root folder of the file system in order to hide the /.etc and lost folder in front of end users. In that case, the user can modify the permission on the root folder of the share using either of two methods.

  • Export the root folder of the file system, go to that shared folder, and modify the NTFS permission accordingly. 

For example:
The user exports the subfolder sub1 of the file system fs1 with local path /fs1/sub1. If they want to change the NTFS permission on the sub1, they can export the root of the file system /fs1 as a share, go to this share, and change the permission on sub1. 

  • Log in to the CIFS server using an account with domain administrator privilege and access the C$ from \\<cifs server address>\c$\<file system name>. Go to the file system and modify the NTFS permission on the subfolders. 

For more details on how share permissions and NTFS permissions work, see Microsoft article below:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc783530(v=ws.10)?redirectedfrom=MSDN

受影響的產品

Dell EMC Unity