Smbup users full#
Smbup users windows#

IfВ attributes of the requested file, and the folders that contain it, restrict access to the file or its folder, the restriction applies to all users. For information about setting share permissions, see Modifying share-level permissions.

Smbup users full#

Unless the InfiniBox administrator has modified the permissions of a share, all authenticated users are granted full control of the share. The permission options for each user or group on each share are:ДЄ user can only perform the tasks that its, or any of its groups', share-level permission level allows.

Share permissionsДЄ n SMB share can only be accessed by a user, or a member of a group,В that has permissions to access the requested share.

Smbup users windows#

The Windows privilege level assigned to the user or the user's group in the user repositoryВ override the permissions that are set on objects.ДЄ user, or a member of a group, that is assigned privileges can perform the tasks that its privilege levels allow.ДЇor the list of supported user privilege levels for local users, see Windows user privilege levels.ДЇor the list of user privilege levels for AD users, refer to (v=ws.11). User permissions are checked from the highest-level group that the user belongs to, through all the levels of sub-groups, until the user itself.File access permissions are checked from the shared folder (the SMB share internal path)В that the file belongs to, through all the levels of sub-folders, until the file itself.Otherwise, the most restrictive setting applies. If the user, or any of its groups, is assigned a Windows privilege level, those privileges overrides any more restrictive settings.Upon each request by an authenticated user for filesystem share access, InfiniBox determines if the user is authorized to access the requested file, and what the user is authorized to do with the file.ДЇor each step in the authorization process, InfiniBox compares the settings of the requested file and all the folders in the file path, with the permissions of the user and all groups that contain it. When the user is defined in the InfiniBox local SMB user repository, InfiniBox is responsible for authenticating the user.В InfiniBoxВ prompts the user to enter a username and password, and authenticates these credentials against its repository.ДЇor more information, see Managing local SMB users and groups. See Managing InfiniBox's membership in Active Directory for SMB. To support Active Directory domains, the InfiniBox system must be a member of a trusted domain, which means the InfiniBox must have joined the AD domain previously. When the user is defined in an Active Directory (AD) domain, AD is responsible for authenticating the user.When a client connects to an SMB share, InfiniBox can authenticate the connecting user using either Active Directory or a local SMB user repository.