Help with auxiliary parameters

pechkin000

Explorer
Joined
Jan 24, 2014
Messages
59
HI,
I have been banging my head against it and I cant figure out the correct syntax. For one of my SMB shares i need to explicitly deny one group from AD. I found valid users = usernames parameter but i need the opposite. I would also prefer if I could use the group name. Can I specify AD users/groups via auxiliary parameters? If yes would the syntax be Domain\Username? Any help would be appreciated.
Thanks
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
HI,
I have been banging my head against it and I can't figure out the correct syntax. For one of my SMB shares i need to explicitly deny one group from AD. I found valid users = usernames parameter but i need the opposite. I would also prefer if I could use the group name. Can I specify AD users/groups via auxiliary parameters? If yes would the syntax be Domain\Username? Any help would be appreciated.
Thanks
You can set a non-inheriting ACE ('this folder only') at the top of the share denying access. Just use a windows client, right-click on the share, click on the 'security' tab and use the editor. Just make sure that you don't set it recursively.
 
Joined
Jul 3, 2015
Messages
926
valid users = @"ADS\groupname"
 
Joined
Jul 3, 2015
Messages
926

pechkin000

Explorer
Joined
Jan 24, 2014
Messages
59
Thank you guys! I understand that valid users would allow access to a group, but is it possible to set a deny parameter rather than allow?
 
Top