PowerScale OneFS 9.8.0.0 Web Administration Guide

Configure default SMB share settings

You can configure SMB share default settings by access zone.

1. Click Protocols > Windows sharing (SMB) > Default share settings.
2. From the Current access zones drop-down list, select the access zone that the default settings apply to.
   CAUTION:If you modify the default settings, the changes are applied to all existing shares in the access zone selected. To modify settings for a specific SMB share, edit the share in the SMB shares tab.
3. In the File filter area, select Enable file filters to enable file filtering.
4. In the File extensions drop-down, select to Deny or Allow writes for a list of file extensions.
   1. Click Add file extensions to add extensions to the list.
   2. Enter the file extension in the empty field. Continue adding file extensions as needed.
   3. Click Add extensions.
5. In the Advanced settings area, choose the system default or a custom configuration for the following settings:
   • Continuous availability timeout
   • Strict continuous availability lockout
   • Create permission
   • Directory create mask
   • Directory create mode
   • File create mask
   • File create mode
   • Change notify
   • Oplocks
   • Impersonate guest
   • Impersonate user
   • NTFS ACL
   • Access based enumeration
   • Host ACL
   CAUTION:Implementing Access Based Enumeration (ABE) on file and directory shares introduces extra CPU load to handle relevant SMB requests. It is crucial to note that applying ABE without careful consideration can lead to performance degradation of varying severity. Therefore, it is recommended to enable ABE only when explicitly necessary. Prioritize thoughtful evaluation of the share's tree structure, the assignment of Access Control Entries (ACEs) on nested files and directories, and consideration of the associated workflow before implementation.

   NOTE:When you enable ABE, expect a refresh time of around 30 seconds for the configuration to synchronize across all nodes in the cluster. It is important to note that during this process, SMB file sharing services continue to run without interruption. Once the configuration change is complete, users may notice that, upon refreshing Windows Explorer, shares, files, or folders for which they lack read access will no longer be visible.
6. Click Save changes.