Is there any effect by removing "Domain Admins" group from SVM's BUILTIN\Administrators?
Applies to
- ONTAP 9
- Microsoft Management Console (MMC)
Answer
- By removing "Domain Admins" from BUILTIN\Administrators, the members belonging to "Domain Admins" will no longer have the right to manage CIFS shares via MMC.
- Regular CIFS share access will continue to be available as long as you have CIFS share-level and file-level permissions.
- If a specific domain user needs to manage CIFS shares via MMC, that domain user must be explicitly added to BUILTIN\Administrators of the SVM.
Additional Information
additionalInformation_text