UNSOLVED

landog1

updated

15 years ago

L

landog1

1 Rookie

•

96 Posts

0

2600

November 3rd, 2011 04:00

NTFS permssions - checkpoints

We have a problem with accessing checkpoints.

We use Celerra replication.  On our source Celerra, we had NTFS permssions set for the local Administrators group.  Our domain group was a member of that local Administrators group.

This did not give us NTFS permssions to the replicated file systems on the destination.  Checkpoints were made of the replicated file systems.

Last week, we changed NTFS permssions on the source so that our domain group has permissions directly.  We can now access the replicated file systems on the destination Celerra, and newly created checkpoints, but we cannot access the checkpoints created prior to the change.

Is there any way we can change NTFS permssions on the older checkpoints, or otherwise gain access?  We don't even see a permssions tab in Windows Explorer on the folders of the older checkpoints.

Thanks...

  • landog1

    1 Rookie

    •

    96 Posts

    613

    0

    Posted November 3rd, 2011 05:00

    emc216579 is interesting, but it does not seem to provide a solution.

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    613

    0

    Posted November 3rd, 2011 05:00

    step 3 in that solution ..try it

  • landog1

    1 Rookie

    •

    96 Posts

    613

    0

    Posted November 3rd, 2011 05:00

    Are saying that I can take a writable snapshot of a checkpoint?

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    613

    0

    Posted November 3rd, 2011 05:00

    take a look at this solution: emc216579

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    613

    0

    Posted November 3rd, 2011 05:00

    try to take a writable snapshot and then take ownership of that share and reset permissions.

  • landog1

    1 Rookie

    •

    96 Posts

    613

    0

    Posted November 3rd, 2011 05:00

    I would be very happy to have read-only access. 

    I cannot browse them at all.  I am denied access as we have no NTFS permssions, and cannot set them.

  • Peter_EMC

    674 Posts

    613

    0

    Posted November 3rd, 2011 05:00

    Think about it.

    If you access the destination filesystem of a running replication, you are using a cifs server on the destination datamover which is different (and not replicated) than the source cifs server.

    This destination cifs server has its own local Administrators group ...

    I am not sure if adding the Domain Administrators to this local administrator group would solve the issue.

    There is no way to change windows ACLs on checkpoints.

  • dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    613

    0

    Posted November 3rd, 2011 05:00

    those are read-only, but i can't remember if you can take a writable checkpoint of read-only checkpoint.

  • landog1

    1 Rookie

    •

    96 Posts

    611

    0

    Posted November 3rd, 2011 06:00

    Peter-

    Trust me, I have thought about it and I do understand the issue.  By the way, the Domain Adminstrators and our our team's group are members of the local Adminstrators group on both the source and destination Celerra.  I have mapped a drive to the destination C$ share as the local Administrator, and the local Adminstrator account is also denied access. 

    If there is no way to change the windows ACL on the checkpoints, we can accept that and move on.  It's just been frustrating working with EMC support over three days, explaining the situation repeatedly, starting webex sessions where the tech on the other end takes hours to try a thing or two, running out of time and starting over from scratch the next day with a new tech.

    Early in each support call I have asked if there is a way to change the windows ACL on the checkpoints, and I have never been given a straight answer.

    I was hoping that there might be a work around with a Linux account or NFS access.

    Thanks,

    Marty

  • landog1

    1 Rookie

    •

    96 Posts

    362

    0

    Posted November 3rd, 2011 06:00

    Just to be clear, the c$ share is not failing.  We can access file systems through that share - just not the ones we do not have NTFS permssions for.

    I guess we will try NFS.  Thanks for your help.

    -Marty