PowerVault NX Series Network Attached Storage Systems Windows Storage Server 2016 Administrator's Guide

Authorizing access to the ADS LDS namespace object

To grant access to the namespace object:

1. On the taskbar, click Start, and then type cmd in the search box.
2. Right-click Command Prompt, and select Run as administrator.
3. Navigate to the C:\WINDOWS\ADAM directory, and run the dsacls command to grant the Everyone group read access to the mapping data store as follows:

   dsacls "\\server1:389\CN=nfsadldsinstance,dc=server1" /G everyone:GR /I:T

4. Optionally, if you are setting up a shared AD LDS store to allow multiple NFS servers to query the account mapping database, add the mapping data store to the ACL to allow Read permissions for the Anonymous Logon account as follows:

   dsacls "\\server1:389\CN=nfsadldsinstance,dc=server1" /G "anonymous logon":GR /I:T

   NOTE: You can skip this task if there is no shared access between computers to the mapping data store.