Reference Guide

Table Of Contents
-create {-name <name> -domain <domain_name> | -sid <SID> }
Add a new mapping entry in the Secure Mapping database.
-update {-name <name> -domain <domain_name> | -sid <SID> }
Update a mapping entry from the Secure Mapping database.
-delete {-name <name> -domain <domain_name> | -sid <SID> }
Delete a mapping entry from the Secure Mapping database.
-export [-file <filename>]
Export Secure Mapping database to the specified file.
-import -file <filename>
Import Secure Mapping database from the specified file.
-report
Display Secure Mapping database health and content.
-setspn
Manage Windows security principals (SPNs) of the specified computer that is joined to AD.
NOTE: SPNs are required for domain configurations in which the DNS domain is different than
authentication domain (Kerberos realm). For example, if the DNS server zone includes a DNS
CNAME record that maps compname.<domain1 FQDN> to compname.<server's domain
FQDN>, then the SPN host compname.<domain1 FQDN> must be added for the compname.
Usage:
svc_nas_cifssupport --server <server name> | ALL -args="-setspn
-list compname=<comp_name>
| -add <SPN>
compname=<comp_name>,domain=<full_domain_name>,admin=<admin_name>
| -delete <SPN>"
-list compname=<comp_name>
Display all SPNs for the specified FQDN server, both for the SMB server and for the KDC
Windows AD entry.
-add <SPN> compname=<comp_name>,domain=<full_domain_name>,admin=<admin_name>
Add the specified SPN to both the NAS server and AD.
-delete <SPN>
Delete the specified SPN for both the NAS server and AD.
-smbhash
Troubleshoot issues with the Microsoft Windows Branch caching mechanism. BranchCache V1 and
BranchCache V2 are supported.
Usage:
svc_nas_cifssupport --server <server name> | ALL -args="-smbhash
-hashgen <path> [-recursive] [-minsize <size>]
| -hashdel <path> [-recursive]
| -abort <id>
| -info
| -fsusage <fs_name>
| -exclusionfilter <filter>
| -audit {enable | disable} [-task] [-service] [-access]
| -cleanup <fs_name> [-all | -unusedfor <days> | -unusedsince
<date>]"
-hashgen <path> [-recursive] [-minsize <size>]
Generate all SMB hash files for the specified path. If -recursive is used, the SMB hash is
recursively generated for the subdirectories.
-hashdel <path> [-recursive]
Delete all SMB hash files for the specified path.
-abort <id>
Service Commands
61