Can workgroup user access a domain-joined CIFS server?
Applies to
- ONTAP 9
- CIFS
Answer
- A workgroup user can access a domain-joined CIFS server, but there are specific considerations and configurations that need to be in place.
- When a CIFS server is joined to a domain, it typically uses the domain's authentication mechanisms to control access to shares.
- However, users who are not part of the domain (i.e., workgroup users) can still access the shares if the following conditions are met:
- The CIFS server must be configured to allow access to workgroup users. This can involve setting up local accounts on the CIFS server that match the workgroup users' credentials (username and password).
- The share permissions and NTFS file permissions on the CIFS server must be configured to grant the necessary access to the workgroup user or the local account that corresponds to the workgroup user.
- If the workgroup user's computer is not part of the domain, the user may need to provide the appropriate credentials (username and password) when accessing the shares. This can be done by mapping the network drive and selecting the option to use different credentials, or by entering the credentials when prompted during access.
- In some cases, it may be necessary to manage the local accounts and permissions directly on the CIFS server, as domain accounts will not be applicable for workgroup users.
- Moreover, Utilizing local accounts for access fails to deliver the centralized management and security provided by domain accounts.
Note: While workgroup users can access domain-joined CIFS servers, the process requires careful configuration and management of permissions.