跳至主要內容
  • 簡單快速地下訂單
  • 檢視訂單及追蹤商品運送狀態
  • 建立並存取您的產品清單
  • 使用「公司管理」來管理您的 Dell EMC 網站、產品和產品層級連絡人。

Dell EMC Unity: Receiving warning when trying to modify the NTFS permission on the root of the share folder (User Correctable)

摘要: Receiving warning message when trying to modify the NTFS permission on the root of the share folder.

本文可能採用自動翻譯。如果您對翻譯品質有任何寶貴意見,請使用此頁面底部的表單告訴我們,謝謝。

文章內容


症狀

User is receiving the below error when trying to modify the NTFS permission of a CIFS share in Windows explorer or Computer Management.
Remotely setting permissions on the folder at the root of the share removes all inherited permissions from the root folder and all subfolders. To set permissions without removing the inherited permissions, click No and either change the permissions on a child folder or make the change while logged in locally. Do you want to continue?
If the user chooses to apply, the original ACL is cleaned up, and only leaves the newly added ACE in the ACL.

For example, if the user wants to add a local administrator to the NTFS permission on a share, the original ACE Everyone is removed. 
 
image.png

After clicking yes, Everyone is removed and only Administrator is left in the ACL of the shared folder and its subfolders. No matter how many ACEs are configured in the Security tab, they are all removed if they are inherited permissions. 
 
image.png

原因

This is working as designed. It is expected to see this warning when modifying share permissions, no matter whether you are doing it using Windows Explorer or Computer Management. 

解析度

If the user wants to add explicit permission for certain users on the root folder of the share, it is recommended to do that by modifying the Share Permission from Windows Computer Management (compmgmt.msc). 

For example:
If the user wants to only allow user A to access the shared folder, they can remove everyone from the Share Permissions tab of the share in Computer Management and add user A with the wanted permission explicitly. 

Some users are exporting the subfolder of the root folder of the file system in order to hide the /.etc and lost folder in front of end users. In that case, the user can modify the permission on the root folder of the share using either of two methods.

  • Export the root folder of the file system, go to that shared folder, and modify the NTFS permission accordingly. 

For example:
The user exports the subfolder sub1 of the file system fs1 with local path /fs1/sub1. If they want to change the NTFS permission on the sub1, they can export the root of the file system /fs1 as a share, go to this share, and change the permission on sub1. 

  • Log in to the CIFS server using an account with domain administrator privilege and access the C$ from \\<cifs server address>\c$\<file system name>. Go to the file system and modify the NTFS permission on the subfolders. 

For more details on how share permissions and NTFS permissions work, see Microsoft article below:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc783530(v=ws.10)?redirectedfrom=MSDN

文章屬性


受影響的產品

Dell EMC Unity

上次發佈日期

02 12月 2022

版本

4

文章類型

Solution