Modifying SMB servers

You can move a SMB server from a workgroup to an Active Directory domain, from a workgroup to another workgroup, or from an Active Directory domain to a workgroup by using the vserver cifs modify command.

Move the SMB server from a workgroup to an Active Directory domain:

• 
  
  1. Set the administrative status of the SMB server to down .

     Example

     Cluster1::>vserver cifs modify -vserver vs1 -status-admin down 
     
  2. Move the SMB server from the workgroup to an Active Directory domain: vsserver cifs modify -vserver vserver_name -domain domain_name

     Example

     Cluster1::>vserver cifs modify -vserver vs1 -domain example.com 
     
     

     In order to create an Active Directory machine account for the SMB server, you must supply the name and password of a Windows account with sufficient privileges to add computers to the "ou=example_ou" container within the example.com domain.

     Beginning with ONTAP 9.7, your AD administrator can provide you with a URI to a keytab file as an alternative to providing you with a name and password to a privileged Windows account. When you receive the URI, include it in the -keytab-uri parameter with the vserver cifs commands.

Move the SMB server from an Active Directory domain to a workgroup:

• 
  
  1. Set the administrative status of the SMB server to down .

     Example

     Cluster1::>vserver cifs modify -vserver vs1 -status-admin down
     
  2. Modify the workgroup for the SMB server: vserver cifs modify -vserver vserver_name -workgroup new_workgroup_name

     Example

     Cluster1::>vserver cifs modify -vserver vs1 -workgroup workgroup2
     
     

Move the SMB server from an Active Directory domain to a workgroup:

• 
  
  1. Set the administrative status of the SMB server to down .

     Example

     Cluster1::>vserver cifs modify -vserver vs1 -status-admin down
     
  2. Move the SMB server from the Active Directory domain to a workgroup: vserver cifs modify -vserver vserver_name -workgroup workgroup_name

     Example

     cluster1::> vserver cifs modify -vserver vs1 -workgroup workgroup1
     
     Note

     To enter workgroup mode, all domain-based features must be disabled and their configuration removed automatically by the system, including continuously-available shares, shadow copies, and AES. However, domain-configured share ACLs such as "EXAMPLE.COM\userName" will not work properly, but cannot be removed by ONTAP. Remove these share ACLs as soon as possible using external tools after the command completes. If AES is enabled, you may be asked to supply the name and password of a Windows account with sufficient privileges to disable it in the "EXAMPLE.COM" domain.

  • Modify other attributes by using the appropriate parameter of the vserver cifs modify command.