Manage Samba permissions from Windows

Posted on By Nikola Stojanoski

For those who installed samba and join the server to Windows Domain, this tutorial will show you how to Manage Samba permissions from Windows machine.

There are a tutorials how to install Samba Server and join it to Windows Active Directory domain, but on most of them i haven’t seen how to manage Samba permissions from Windows machine.

Filesystem support

If you are using ext3 or ext4 file system you need to edit your /etc/fstab and include user_xattr and acl on the partition that you use for your shares:

vi /etc/fstab
/dev/sda3     /shares/Demo     ext4      user_xattr,acl      1 1

ACL options on member server

In the [global] section of your smb.conf add the following lines:

vfs objects = acl_xattr
map acl inherit = Yes
store dos attributes = Yes

Note: This is only required on Domain Member Servers

SeDiskOperatorPrivilege

You need an account with SeDiskOperatorPrivilege privileges to be able to configure share permissions. With the following command you will enable Domain Admins to configure share permissions:

net rpc rights grant 'DOMAIN\Domain Admins' SeDiskOperatorPrivilege -Uadministrator

Configure share permissions from Windows machine

  • Login on a Windows machine with Domain Admins account and open MMC Console.
  • In the menu bar go to File -> Add/Remove Snap-in and choose Computer Management.
  • Choose Another Computer and enter the name or IP address of your Samba server, you’ve create the new share on.
  • Navigate to System Tools -> Shared Folders -> Shares and select the new added share.

Samba MMC console

  • Right-click to the share name, choose Properties.
  • To configure who can access the share and the appropriate permissions go to the Share Permissions tab.

Samba share permissions

  • Go to the Security tab, click the Edit button and configure the file system permissions.

Samba security permissions

Change permissions on folders of a share

You can change folder security permissions from any computer where you are logged in with account which is member of Domain Administrators.

  • Log on to a Windows machine as Domain Administrator.
  • Navigate to the folder of which you want to change the permissions.
  • Right-click to the folder and choose Properties.
  • Go to the Security tab and click the Edit button.
  • Change the permissions to your needs.

Samba Folder security permissions

Samba Website: http://www.samba.org/

Related articles

Crontab Job in Linux (Explained)

Linux

Fix: 413 Request Entity Too Large on Nginx

NGINX Logo

Extend LVM Partition (Explained)

Debian Logo

grep word recursively in file extension

Debian Logo

Selenium Headless Firefox WebDriver using PyVirtualDisplay

selinium logo

Linux find text in files

Debian Logo
Subscribe
Notify of
guest
3 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
Edan Brooke
Edan Brooke
7 years ago

I get no Security tab for one share on an external HDD (ext4) but do see it for a share on an SD card (raspberry Pi OS card, also ext4).

0
Reply
Donatello Tuttle
Donatello Tuttle
6 years ago
Reply to  Edan Brooke

are you retarded bro?

-7
Reply
mauricio arregui
mauricio arregui
6 years ago

What permissions must be granted on the Linux-Samba box for /share/Markweld ? (user:group)

0
Reply

Advertisement