Skip to main content

Display information about ONTAP SMB restricted group GPOs

Contributors netapp-aaron-holt netapp-thomi netapp-ahibbard netapp-aherbin
PDFs

You can display detailed information about restricted groups that are defined as Group Policy Objects (GPOs) in Active Directory and that are applied to the CIFS server.

About this task

By default, the following information is displayed:

  • Group policy name

  • Group policy version

  • Link

    Specifies the level in which the group policy is configured. Possible output values include the following:

    • Local when the group policy is configured in ONTAP

    • Site when the group policy is configured at the site level in the domain controller

    • Domain when the group policy is configured at the domain level in the domain controller

    • OrganizationalUnit when the group policy is configured at the Organizational Unit (OU) level in the domain controller

    • RSOP for the resultant set of policies derived from all the group policies defined at various levels

  • Restricted group name

  • The users and groups who belong to and who do not belong to the restricted group

  • The list of groups to which the restricted group is added

    A group can be a member of groups other than the groups listed here.

Step

  1. Display information about all restricted group GPOs by performing one of the following actions:

    If you want to display information about all restricted group GPOs…​ Enter the command…​

    Defined in Active Directory

    vserver cifs group-policy restricted-group show-defined -vserver vserver_name

    Applied to a CIFS server

    vserver cifs group-policy restricted-group show-applied -vserver vserver_name
Example

The following example displays information about restricted group GPOs defined in the Active Directory domain to which the CIFS-enabled SVM named vs1 belongs:

cluster1::> vserver cifs group-policy restricted-group show-defined -vserver vs1

Vserver: vs1
-------------

     Group Policy Name: gpo1
               Version: 16
                  Link: OrganizationalUnit
            Group Name: group1
               Members: user1
              MemberOf: EXAMPLE\group9

     Group Policy Name: Resultant Set of Policy
               Version: 0
                  Link: RSOP
            Group Name: group1
               Members: user1
              MemberOf: EXAMPLE\group9

The following example displays information about restricted groups GPOs applied to the CIFS-enabled SVM vs1:

cluster1::> vserver cifs group-policy restricted-group show-applied -vserver vs1

Vserver: vs1
-------------

     Group Policy Name: gpo1
               Version: 16
                  Link: OrganizationalUnit
            Group Name: group1
               Members: user1
              MemberOf: EXAMPLE\group9

     Group Policy Name: Resultant Set of Policy
               Version: 0
                  Link: RSOP
            Group Name: group1
               Members: user1
              MemberOf: EXAMPLE\group9
Related information

Display information about GPO configurations