Unsolved
This post is more than 5 years old
1 Rookie
•
22 Posts
1
2626
April 10th, 2014 13:00
Windows 2012 and Dynamic Access Control
Do we support this on the VNX 5300 using CIFS?
No Events found!
Unsolved
This post is more than 5 years old
1 Rookie
•
22 Posts
1
2626
April 10th, 2014 13:00
Do we support this on the VNX 5300 using CIFS?
Top
omega71
1 Message
1
April 30th, 2015 21:00
Is it possible to find out what, if any, platforms support this? We currently have a VNX but are looking at the Isilon and I am very interested in finding out what Microsoft features are supported, such as Dynamic Access Control, File Classification Infrastructure, File Management Tasks, etc.
Thanks.
SturdyErde
2 Posts
0
January 22nd, 2016 17:00
I'd love to hear if anyone is using Windows Server 2012's dynamic access control feature on top of a VNX. From what I understand, DAC requires a Windows Server 2012 file server in order to work. I was hoping there might be a way to apply DAC rules to a share directly on the VNX and take a Windows server out of the equation.
"The next requirement for claim-based authorization and auditing is a Windows Server 2012 file server. When a user connects to a file share, the file server performs an access check to the share using the credentials of the incoming connection. This means the file server determines access to share. This also means that various components on the file server must be claims aware, such as the Local Security Authority and the Kerberos application server. The file server hosting the share must be a Windows Server 2012 file server to read claims and device authorization data from a Kerberos ticket, translate those security identifiers (SIDs) and claims from the ticket into an authentication token, and compare the authorization data in the token against conditional expressions included in the security descriptor."
http://social.technet.microsoft.com/wiki/contents/articles/14269.introducing-dynamic-access-control.aspx