Hello everyone,
I have a FreeNAS server (ver 8.3.0) and I'm using it as a fileserver in a Windows 2008r2 domain. We're using Windows permissions on each ZFS dataset/CIFS share.
The issue: Permissions and ownership...everything is wonky. If I take ownership of a folder, I can add remove users/groups from the security tab in windows. However, I can't change ownership to the "Domain Admins" group. I get an error "An error occurred while apply security info to: \\server\Testing\subfolder This security ID may not be assigned as the owner of this object."
At the command line, what should the Unix user and group be for all of the folders? It's defaulting to "boss:domain admins" (where "adminuser" is my bosses username). Where is this being set? I want the Windows group "Domain Admins" to own all of the folders and have full control, but I run into all sorts of Access is Denied errors when trying to do that. I can't even adjust the Domain Admin permissions on the root folder. I just get access denied.
If I change the owner of all folders to my Windows username, I can do anything I want.
I'll be happy to provide more info.
I have a FreeNAS server (ver 8.3.0) and I'm using it as a fileserver in a Windows 2008r2 domain. We're using Windows permissions on each ZFS dataset/CIFS share.
The issue: Permissions and ownership...everything is wonky. If I take ownership of a folder, I can add remove users/groups from the security tab in windows. However, I can't change ownership to the "Domain Admins" group. I get an error "An error occurred while apply security info to: \\server\Testing\subfolder This security ID may not be assigned as the owner of this object."
At the command line, what should the Unix user and group be for all of the folders? It's defaulting to "boss:domain admins" (where "adminuser" is my bosses username). Where is this being set? I want the Windows group "Domain Admins" to own all of the folders and have full control, but I run into all sorts of Access is Denied errors when trying to do that. I can't even adjust the Domain Admin permissions on the root folder. I just get access denied.
If I change the owner of all folders to my Windows username, I can do anything I want.
I'll be happy to provide more info.