How to grant and remove access to CIFS shares

Applies to

• Data ONTAP 8.2 7-Mode
• Data ONTAP 8.1 7-Mode
• Data ONTAP 7 and earlier              

Description

When setting access permissions for a CIFS share, an error occurs:
> cifs access <share> <user> <permission>
Unknown user/group <user>

Procedure

There are three ways to grant or remove access to CIFS shares:

• Microsoft Management Console
• Filer Command Line
• FilerView

1. Granting and removing access using Server Manager:
   1. Log into a Windows NT workstation or server using a user account that has Administrator rights to the storage system.
   2. Start Server Manager
   3. Select Computer
   4. Click Select Domain
   5. Enter the storage system's name for the Domain, in the format \Filername
   6. Once the storage system's name is highlighted, click Computer
   7. Click Shared Directories
   8. Select the Share needed to modify the access
   9. Click Permissions
   10. Add, delete, or modify rights for users and groups listed.
   11. Add or delete users and groups as needed.
   12. Click OK
2. Granting and removing access using CIFS access command:
   1. Access storage system console.
   2. Use cifs access command to grant or remove access to a share.
   3. To add access to a share, type:
      cifs access <share> [-g] <user|group> <rights>
      Rights can be UNIX-style combinations of r w x - or NT-style "No Access", "Read", "Change", and "Full Control".
      Note: For users and groups, using double quotes to enclose names with spaces may be required.  For example: "NETAPPDomain Admins".
   4. To remove access to a share type:
      cifs access -delete <share> [-g] <user|group> 
3. Granting and removing access using FilerView:
   1. Log into FilerView and navigate to CIFS.
   2. Select CIFS > Shares > Manage
   3. For the share to be modified, on the right side under Operations, select Change Access.
   4. Add and Delete Users and Groups as needed.

Additional Information

See How to make a CIFS share read-only