Skip to main content
NetApp Knowledge Base

How to convert a CIFS SVM from a domain membership to workgroup

Last Updated:

Applies to

  • ONTAP 9
  • CIFS / SMB
  • CIFS server Authentication style set to domain


This article describes the steps to be taken to convert an SVM from domain to workgroup member.


1. Review the current Authentication Style configured on the SVM and CIFS shares present:

cluster1::> vserver cifs show
            Server          Status    Domain/Workgroup Authentication
Vserver     Name            Admin     Name             Style
----------- --------------- --------- ---------------- --------------
svm1        SVM1            up  domain   <<<


Caution: Review the warning below closely before confirming the operation with "y" key.

2. Modify the SVM CIFS configuration:

cluster1::> vserver cifs modify -vserver svm1 -status-admin down -workgroup WORKGROUP

Warning: To enter workgroup mode, all domain-based features must be disabled
         and their configuration removed automatically by the system, including
         continuously-available shares and shadow copies. However,
         domain-configured share ACLs such as "DEMO.NETAPP.COM\userName" will
         not work properly, but cannot be removed by Data ONTAP. Remove these
         share ACLs as soon as possible using external tools after the command

Do you want to continue? {y|n}: y

3. Confirm Authentication Style has now changed to workgroup:

cluster1::> vserver cifs show
            Server          Status    Domain/Workgroup Authentication
Vserver     Name            Admin     Name             Style
----------- --------------- --------- ---------------- --------------
svm1        SVM1            up        WORKGROUP        workgroup <<<

4. Create local user on the SVM for CIFS access:

cluster1::> cifs users-and-groups local-user create -user-name user1 -is-account-disabled false -vserver svm1

Enter the password:
Confirm the password:

5. Confirm local user creation:

cluster1::> cifs users-and-groups local-user show
Vserver      User Name                   Full Name            Description
------------ --------------------------- -------------------- -------------
svm1         SVM1\Administrator                               Built-in administrator account
svm1         SVM1\User1                  -                    -
2 entries were displayed.


Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.