Administrator Guide

– To view the parent folders of a particular folder, click Up.
h. From the Folder template drop-down menu, select the form that the user’s folders should take:
• Select /Domain/User if you want the user’s folders to take the form: <initial_path>/<domain>/<username>.
• Select /User if you want the user’s folders to take the form: <initial_path>/<username>.
i. (Optional) Congure the remaining SMB home shares attributes as needed. These options are described in the online help.
• To prevent clients accessing the share from being able to view the names of folders and les in the share to which they
do not have access, click the Content tab and select the Access Based Enumeration check box.
• To enable virus scanning for SMB home shares, click the Antivirus Scanners tab and select the Virus Scan check box.
• To exempt directories from antivirus scanning, select the Enable virus scan directory exclusion check box and specify
the directories in the Directories excluded from scan list.
• To exempt le extensions from antivirus scanning, select the Enable virus scan extension exclusion check box and
specify the extensions in the Extensions excluded from scan list.
• To deny access to les larger than the specied antivirus scanning le size threshold, select the Deny un-scanned large
les check box.
• To change the maximum size of les that are included in anti-virus scanning, type a size in the Virus scan le size
threshold eld in kilobytes (KB), megabytes (MB), gigabytes (GB), or terabytes (TB).
j. Click OK.
If you did not enable Automatic folder creation, perform steps 2 and 3.
2. Give ownership of the SMB home shares to the account that will create the folders (either using a user created script or
manually) for each user’s home share.
a. Using Windows Explorer, connect to the SMB home share initial path.
b. In the security setting of the SMB share, click Advanced and change owner to Domain Admins, a specic domain
administrator, or a FluidFS cluster administrator account.
c. Disconnect from the SMB home share and reconnect to it as the account that has ownership of it.
3. Using Windows Explorer, for each user that you want to be given a home share, create a folder for them that conforms to the
folder template you selected in Step h.
Changing the Owner of an SMB Share
When an SMB share is created, the owner of the SMB share must be changed before setting any access control lists (ACLs) or
share-level permissions (SLP), or attempting to access the SMB share. The following methods can be used to initially change the
owner of an SMB share:
• Use an Active Directory domain account that has its primary group set as the Domain Admins group.
• Use the FluidFS cluster Administrator account (used if not joined to Active Directory or Domain Admin credentials are not
available).
Change the Owner of an SMB Share Using an Active Directory Domain Account
The Active Directory domain account must have its primary group set as the Domain Admins group to change the owner of an SMB
share. These steps might vary slightly depending on which version of Windows you are using.
1. Open Windows Explorer and in the address bar type: \\<client_VIP_or_name>. A list of all SMB shares is displayed.
2. Right-click the required SMB share (folder) and select Properties. The Properties dialog box appears.
3. Click the Security tab and then click Advanced. The Advanced Security Settings dialog box appears.
4. Click the Owner tab and then click Edit. The Advanced Security Settings dialog box appears.
5. Click Other users or groups. The Select User or Group dialog box appears.
6. Select the domain admin user account that is used to set ACLs for this SMB share or select the Domain Admins group. Click
OK.
7. Ensure that Replace owner on subcontainers and objects is selected and click OK.
8. Click the Permissions tab and follow Microsoft’s best practices to assign ACL permissions for users and groups to the SMB
share.
572
FluidFS NAS Volumes, Shares, and Exports