How to convert a CIFS SVM from a domain membership to workgroup

Applies to

• ONTAP 9
• CIFS / SMB
• CIFS server Authentication style set to domain

Description

This article describes the steps to be taken to convert an SVM from domain to workgroup member.

Procedure

1. Review the current Authentication Style configured on the SVM and CIFS shares present:

cluster1::> vserver cifs show
            Server          Status    Domain/Workgroup Authentication
Vserver     Name            Admin     Name             Style
----------- --------------- --------- ---------------- --------------
svm1        SVM1            up        demo.netapp.com  domain   <<<
 

Caution: Review the warning below closely before confirming the operation with "y" key.

2. Modify the SVM CIFS configuration:

cluster1::> vserver cifs modify -vserver svm1 -status-admin down -workgroup WORKGROUP

Warning: To enter workgroup mode, all domain-based features must be disabled
         and their configuration removed automatically by the system, including
         continuously-available shares and shadow copies. However,
         domain-configured share ACLs such as "DEMO.NETAPP.COM\userName" will
         not work properly, but cannot be removed by Data ONTAP. Remove these
         share ACLs as soon as possible using external tools after the command
         completes.
Do you want to continue? {y|n}: y

3. Confirm Authentication Style has now changed to workgroup:

cluster1::> vserver cifs show
            Server          Status    Domain/Workgroup Authentication
Vserver     Name            Admin     Name             Style
----------- --------------- --------- ---------------- --------------
svm1        SVM1            up        WORKGROUP        workgroup <<<

4. Create local user on the SVM for CIFS access:

cluster1::> cifs users-and-groups local-user create -user-name user1 -is-account-disabled false -vserver svm1

Enter the password:
Confirm the password:

5. Confirm local user creation:

cluster1::> cifs users-and-groups local-user show
Vserver      User Name                   Full Name            Description
------------ --------------------------- -------------------- -------------
svm1         SVM1\Administrator                               Built-in administrator account
svm1         SVM1\User1                  -                    -
2 entries were displayed.

Additional Information

How to convert a CIFS SVM from workgroup to domain membership