Skip to main content

Modify SMB servers

Contributors netapp-ahibbard netapp-aherbin
PDFs

You can move a SMB server from a workgroup to an Active Directory domain, from a workgroup to another workgroup, or from an Active Directory domain to a workgroup by using the vserver cifs modify command.

About this task

You can also modify other attributes of the SMB server, such as the SMB server name and administrative status. See the man page for details.

Choices

  • Move the SMB server from a workgroup to an Active Directory domain:

    1. Set the administrative status of the SMB server to down.

      Cluster1::>vserver cifs modify -vserver vs1 -status-admin down

    2. Move the SMB server from the workgroup to an Active Directory domain: vsserver cifs modify -vserver vserver_name -domain domain_name

      Cluster1::>vserver cifs modify -vserver vs1 -domain example.com

      In order to create an Active Directory machine account for the SMB server, you must supply the name and password of a Windows account with sufficient privileges to add computers to the ou=example ou container within the example.com domain.

      Beginning with ONTAP 9.7, your AD administrator can provide you with a URI to a keytab file as an alternative to providing you with a name and password to a privileged Windows account. When you receive the URI, include it in the -keytab-uri parameter with the vserver cifs commands.

  • Move the SMB server from a workgroup to another workgroup:

    1. Set the administrative status of the SMB server to down.

      Cluster1::>vserver cifs modify -vserver vs1 -status-admin down

    2. Modify the workgroup for the SMB server: vserver cifs modify -vserver vserver_name -workgroup new_workgroup_name

      Cluster1::>vserver cifs modify -vserver vs1 -workgroup workgroup2

  • Move the SMB server from an Active Directory domain to a workgroup:

    1. Set the administrative status of the SMB server to down.

      Cluster1::>vserver cifs modify -vserver vs1 -status-admin down

    2. Move the SMB server from the Active Directory domain to a workgroup: vserver cifs modify -vserver vserver_name -workgroup workgroup_name

      cluster1::> vserver cifs modify -vserver vs1 -workgroup workgroup1
      Note

      To enter workgroup mode, all domain-based features must be disabled and their configuration removed automatically by the system, including continuously-available shares, shadow copies, and AES. However, domain-configured share ACLs such as "EXAMPLE.COM\userName" will not work properly, but cannot be removed by ONTAP. Remove these share ACLs as soon as possible using external tools after the command completes. If AES is enabled, you may be asked to supply the name and password of a Windows account with sufficient privileges to disable it in the "EXAMPLE.COM" domain.

      • Modify other attributes by using the appropriate parameter of the vserver cifs modify command.