Rimuovere Storage-Level Access Guard
È possibile rimuovere Storage-Level Access Guard su un volume o qtree se non si desidera più impostare la sicurezza dell'accesso a livello di storage. La rimozione di Storage-Level Access Guard non modifica o rimuove la normale protezione di file e directory NTFS.
-
Verificare che nel volume o nel qtree sia configurato Storage-Level Access Guard utilizzando
vserver security file-directory show
comando.vserver security file-directory show -vserver vs1 -path /datavol2
Vserver: vs1 File Path: /datavol2 File Inode Number: 99 Security Style: ntfs Effective Style: ntfs DOS Attributes: 10 DOS Attributes in Text: ----D--- Expanded Dos Attributes: - Unix User Id: 0 Unix Group Id: 0 Unix Mode Bits: 777 Unix Mode Bits in Text: rwxrwxrwx ACLs: NTFS Security Descriptor Control:0xbf14 Owner:BUILTIN\Administrators Group:BUILTIN\Administrators SACL - ACEs AUDIT-EXAMPLE\Domain Users-0xf01ff-OI|CI|FA DACL - ACEs ALLOW-EXAMPLE\Domain Admins-0x1f01ff-OI|CI ALLOW-EXAMPLE\Domain Users-0x1301bf-OI|CI Storage-Level Access Guard security DACL (Applies to Directories): ALLOW-BUILTIN\Administrators-0x1f01ff ALLOW-CREATOR OWNER-0x1f01ff ALLOW-EXAMPLE\Domain Admins-0x1f01ff ALLOW-EXAMPLE\Domain Users-0x120089 ALLOW-NT AUTHORITY\SYSTEM-0x1f01ff DACL (Applies to Files): ALLOW-BUILTIN\Administrators-0x1f01ff ALLOW-CREATOR OWNER-0x1f01ff ALLOW-EXAMPLE\Domain Admins-0x1f01ff ALLOW-EXAMPLE\Domain Users-0x120089 ALLOW-NT AUTHORITY\SYSTEM-0x1f01ff
-
Rimuovere Storage-Level Access Guard utilizzando
vserver security file-directory remove-slag
comando.vserver security file-directory remove-slag -vserver vs1 -path /datavol2
-
Verificare che Storage-Level Access Guard sia stato rimosso dal volume o dal qtree utilizzando
vserver security file-directory show
comando.vserver security file-directory show -vserver vs1 -path /datavol2
Vserver: vs1 File Path: /datavol2 File Inode Number: 99 Security Style: ntfs Effective Style: ntfs DOS Attributes: 10 DOS Attributes in Text: ----D--- Expanded Dos Attributes: - Unix User Id: 0 Unix Group Id: 0 Unix Mode Bits: 777 Unix Mode Bits in Text: rwxrwxrwx ACLs: NTFS Security Descriptor Control:0xbf14 Owner:BUILTIN\Administrators Group:BUILTIN\Administrators SACL - ACEs AUDIT-EXAMPLE\Domain Users-0xf01ff-OI|CI|FA DACL - ACEs ALLOW-EXAMPLE\Domain Admins-0x1f01ff-OI|CI ALLOW-EXAMPLE\Domain Users-0x1301bf-OI|CI