Removing Storage-Level Access Guard

You can remove Storage-Level Access Guard on a volume or qtree if you no longer want set access security at the storage level. Removing Storage-Level Access Guard does not modify or remove regular NTFS file and directory security.

1. Verify that the volume or qtree has Storage-Level Access Guard configured by using the vserver security file-directory show command.

   Example

   vserver security file-directory show -vserver vs1 -path /datavol2

      
                   Vserver: vs1
                 File Path: /datavol2
         File Inode Number: 99
            Security Style: ntfs
           Effective Style: ntfs
            DOS Attributes: 10
    DOS Attributes in Text: ----D---
   Expanded Dos Attributes: -
              UNIX User Id: 0
             Unix Group Id: 0
            Unix Mode Bits: 777
    Unix Mode Bits in Text: rwxrwxrwx
                      ACLs: NTFS Security Descriptor
                            Control:0xbf14
                            Owner:BUILTIN\Administrators
                            Group:BUILTIN\Administrators
                            SACL - ACEs
                              AUDIT-EXAMPLE\Domain Users-0xf01ff-OI|CI|FA
                            DACL - ACEs
                              ALLOW-EXAMPLE\Domain Admins-0x1f01ff-OI|CI
                              ALLOW-EXAMPLE\Domain Users-0x1301bf-OI|CI
   
                            Storage-Level Access Guard security
                            DACL (Applies to Directories):
                              ALLOW-BUILTIN\Administrators-0x1f01ff
                              ALLOW-CREATOR OWNER-0x1f01ff
                              ALLOW-EXAMPLE\Domain Admins-0x1f01ff
                              ALLOW-EXAMPLE\Domain Users-0x120089
                              ALLOW-NT AUTHORITY\SYSTEM-0x1f01ff
                            DACL (Applies to Files):
                              ALLOW-BUILTIN\Administrators-0x1f01ff
                              ALLOW-CREATOR OWNER-0x1f01ff
                              ALLOW-EXAMPLE\Domain Admins-0x1f01ff
                              ALLOW-EXAMPLE\Domain Users-0x120089
                              ALLOW-NT AUTHORITY\SYSTEM-0x1f01ff
   
2. Remove Storage-Level Access Guard by using the vserver security file-directory remove-slag command.

   Example

   vserver security file-directory remove-slag -vserver vs1 -path /datavol2
3. Verify that Storage-Level Access Guard has been removed from the volume or qtree by using the vserver security file-directory show command.

   Example

   vserver security file-directory show -vserver vs1 -path /datavol2

                   Vserver: vs1
                 File Path: /datavol2
         File Inode Number: 99
            Security Style: ntfs
           Effective Style: ntfs
            DOS Attributes: 10
    DOS Attributes in Text: ----D---
   Expanded Dos Attributes: -
              UNIX User Id: 0
             Unix Group Id: 0
            Unix Mode Bits: 777
    Unix Mode Bits in Text: rwxrwxrwx
                      ACLs: NTFS Security Descriptor
                            Control:0xbf14
                            Owner:BUILTIN\Administrators
                            Group:BUILTIN\Administrators
                            SACL - ACEs
                              AUDIT-EXAMPLE\Domain Users-0xf01ff-OI|CI|FA
                            DACL - ACEs
                              ALLOW-EXAMPLE\Domain Admins-0x1f01ff-OI|CI
                              ALLOW-EXAMPLE\Domain Users-0x1301bf-OI|CI