Configuring Windows File Sharing

Windows files that you want to share via the CTERA Edge Filer can be protected using one of the following access levels:

• Only Authenticated Users
• Windows ACL Emulation Mode

Only Authenticated Users

Users are required to authenticate using their CTERA Edge Filer user name and password, in order to access the network share.

Windows ACL Emulation Mode

The share is a Windows ACL emulation mode share supporting a full Windows file system folder structure and permissions, including enforcement and settings, known as NT ACLs, and extended attributes such as read-only and hidden.

End users who are familiar with a given folder structure and shares, as well as a given permission scheme, while using the Windows file server, continue to see the same folder structure, shares, and permission scheme after migration to the CTERA Edge Filer. This enables the migration from a current Windows Server-based file system to a CTERA Edge Filer, without the need to apply any structural changes such as flattening the folder structure or simplifying the permissions scheme. The migration is entirely transparent to the end user.

Transition of the mapped network drives and share names available on the Windows client from the Windows file server location to the CTERA Edge Filer location is performed seamlessly using AD GPO capabilities.

File and folder access continue to be available following the migration in the same way they were in the Windows Server-based file system. Access after the migration is through the SMB protocol provided by the CTERA Edge Filer.

Users continue to access the files and folders through standard Windows client computers; for example, using Windows File Explorer. You can manage and change permissions by right-clicking a file or folder and selecting Properties and then the Security tab, just like over a Windows File server.

To set up shares in the CTERA Edge Filer with NT ACL permissions, you need to do the following:

• Set up the users that will access the file system. CTERA recommends taking the users from Active Directory. For more details, see Configuring Windows File Sharing for Active Directory.
• Set up the share with ACL emulation in the CTERA Edge Filer. For more details, see Managing Network Shares.
• Copy the files from the Windows File Server. For more details, see Copying Files From an External File Server to the CTERA Edge Filer.

To configure Windows File Sharing:

1. In the CONFIGURATION tab, select Shares > Windows File Sharing in the navigation pane.
   The Windows File Sharing page is displayed.
   
   Where:
   Enable SMB (Windows File Sharing) – Enable or disable Windows file sharing. If Windows file sharing is disabled, Windows shared folders, defined via Shares > Shares, as described in Managing Network Shares, are no longer accessible.
   Packet Signing – Whether SMB packet signing is required or not, or whether it is dependent on the agreement of the client.
   Client Idle Disconnect Time (minutes) – The amount of time in minutes after which a client should be disconnected, if the connection is idle. There is usually no need to change this setting. The default is 10 minutes.
   Use compatibility mode – Enable access by Windows versions 2000 or earlier. Enabling this option reduces security.
   Hide unreadable files and folders – Hide unreadable files or folders, or shares to which users do not have access, when users access shares via Windows File Sharing.
2. Click Save to save the Windows File Sharing settings.
3. Specify the Domain/Workgroup information:
   Assigned to – The name of an Active Directory domain or Windows workgroup to which the CTERA Edge Filer's Windows File Sharing service is connected.
   Operation Mode – Whether the CTERA Edge Filer's Windows File Sharing service is connected to an Active Directory domain or to a Windows workgroup.
   Status – The status of the connection to an Active Directory domain or Windows workgroup.
   Advanced Mappings – When connected to an Active Directory domain. See Defining Users From an Active Directory Domain, Tree or Forest.
4. Click Connect to Domain/Workgroup to join an Active Directory domain or Windows workgroup:

• For a network with a Active Directory with either a single domain or multi-domain environment: a tree or forest, see Configuring Windows File Sharing for Active Directory.
• For a network with no domain controller, see Configuring Windows File Sharing for a Workgroup for details.

Configuring Windows File Sharing for Active Directory

To configure Windows file sharing for an individual Active Directory domain and for an Active Directory tree or forest, see Defining Users From an Active Directory Domain, Tree or Forest.

Configuring Windows File Sharing for a Workgroup

To configure Windows file sharing for a workgroup:

1. In the In the CONFIGURATION tab, select Shares > Windows File Sharing in the navigation pane.
   The Windows File Sharing page is displayed.
2. Click Connect to Domain/Workgroup.
   The Windows File Sharing wizard opens, displaying the Connect to Domain/Workgroup window.
   
3. Choose Workgroup, and then select the workgroup you want or else type the name of the workgroup in the empty field.
   Note: You must assign this same workgroup name to all of the computers in the network.
   In most Windows versions, the default workgroup name is WORKGROUP.
   The CTERA Edge Filer automatically scans for available workgroups in the LAN. The results of these scans can be selected from the Workgroup list.
4. Click Next and then click Finish.