NTFS on SAN

[Guest dcastelino]

I know NTFS is not a Cluster File System.But this is what we are trying to

acheive by implementing NTFS on SAN:

 

We have 2TB of NTFS Partition on SAN.We also have VMware Server running on

Windows Server 2003.VMware has capabilties to create linked-clones (delta

disks).

 

Our objective is to have the base disk (say 60 GB) on NTFS on SAN and create

linked-clones (delta disks) on local storage on the server.Here is the

question:

 

Can we make NTFS Partition Read-only on SAN.We do not want anyone to make

changes to that base disk on NTFS on SAN.Is there any way or any other

technology other than MIcrosoft Cluster Services to help make this happen.

Because what we see is that If some other user tries to access that NTFS on

SAN, that user writes its own signature and can delete that accidentally.We

want to make that NTFS Read-only on SAN

 

Thanks in advance...

[Guest Herb Martin]

Re: NTFS on SAN

 

 

"dcastelino" <dcastelino@discussions.microsoft.com> wrote in message

news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com...

>I know NTFS is not a Cluster File System.But this is what we are trying to

> acheive by implementing NTFS on SAN:

 

That depends on the SAN hardware and software, i.e., the features of Windows

that it supports. Probably 'yes' in many/most cases.

> Our objective is to have the base disk (say 60 GB) on NTFS on SAN and

> create

> linked-clones (delta disks) on local storage on the server.Here is the

> question:

> Can we make NTFS Partition Read-only on SAN.We do not want anyone to make

> changes to that base disk on NTFS on SAN.Is there any way or any other

 

IF you can format the disk as NTFS (which implies that users can

AUTHENTICATE

to prove their identity and decide their access permissions) then YES, you

can

certainly set the NTFS permission to allow (a maxium of) READ for those

users/groups

who should have (only) this privilege.

> technology other than MIcrosoft Cluster Services to help make this happen.

> Because what we see is that If some other user tries to access that NTFS

> on

> SAN, that user writes its own signature and can delete that

> accidentally.We

> want to make that NTFS Read-only on SAN

 

It is TRIVIAL to make NTFS "read" (or read-only) so the question is, "Does

you

SAN hardware/software support NTFS and Authentication?"

> Thanks in advance...

>

[Guest dcastelino]

Re: NTFS on SAN

 

Yes, our SAN does support Windows and its Authentication..So what you are

saying is that we can have the NTFS folder on SAN to Read-only.I thought

because NTFS is not a cluster file system , each user would write its own

signature on NTFS thereby deleting the stuff what the other user wrote..

 

"Herb Martin" wrote:

>

> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message

> news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com...

> >I know NTFS is not a Cluster File System.But this is what we are trying to

> > acheive by implementing NTFS on SAN:

>

> That depends on the SAN hardware and software, i.e., the features of Windows

> that it supports. Probably 'yes' in many/most cases.

>

> > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and

> > create

> > linked-clones (delta disks) on local storage on the server.Here is the

> > question:

>

> > Can we make NTFS Partition Read-only on SAN.We do not want anyone to make

> > changes to that base disk on NTFS on SAN.Is there any way or any other

>

> IF you can format the disk as NTFS (which implies that users can

> AUTHENTICATE

> to prove their identity and decide their access permissions) then YES, you

> can

> certainly set the NTFS permission to allow (a maxium of) READ for those

> users/groups

> who should have (only) this privilege.

>

> > technology other than MIcrosoft Cluster Services to help make this happen.

> > Because what we see is that If some other user tries to access that NTFS

> > on

> > SAN, that user writes its own signature and can delete that

> > accidentally.We

> > want to make that NTFS Read-only on SAN

>

> It is TRIVIAL to make NTFS "read" (or read-only) so the question is, "Does

> you

> SAN hardware/software support NTFS and Authentication?"

>

> > Thanks in advance...

> >

>

>

>

[Guest Herb Martin]

Re: NTFS on SAN

 

 

"dcastelino" <dcastelino@discussions.microsoft.com> wrote in message

news:560C62CA-CDA4-4D59-BC1D-71C0C231DCB1@microsoft.com...

> Yes, our SAN does support Windows and its Authentication..So what you are

> saying is that we can have the NTFS folder on SAN to Read-only.I thought

> because NTFS is not a cluster file system , each user would write its own

> signature on NTFS thereby deleting the stuff what the other user wrote..

 

No, if the File System is NTFS then EVERYONE (even Admins by default)

will be subject to those permission set by NTFS.

 

Now, if you LET someone write to the NTFS volume, e.g., create a file, they

will typically have Full Control of that file or at least be able to reset

permissions

to whatever they choose, but notice that this is ONLY IF you allow writing

and they then become the owner of the files they write.

 

You can easily setup an NTFS Volume (or even a Share point) that is ONLY

Readable by certain people or even by everyone (Obviously you will need some

administrative method to put the files out there in the latter case, but

this is

trivially doable.

 

This is just the way that NTFS (or pretty much ANY permission system) works.

 

I don't know why you keep referencing some "own signature" because such has

nothing to do with it.

 

Each users SID is used when they CREATE an object (i.e., a File) to

establish the

OWNER of that file, and that file only.

 

> "Herb Martin" wrote:

>

>>

>> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message

>> news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com...

>> >I know NTFS is not a Cluster File System.But this is what we are trying

>> >to

>> > acheive by implementing NTFS on SAN:

>>

>> That depends on the SAN hardware and software, i.e., the features of

>> Windows

>> that it supports. Probably 'yes' in many/most cases.

>>

>> > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and

>> > create

>> > linked-clones (delta disks) on local storage on the server.Here is the

>> > question:

>>

>> > Can we make NTFS Partition Read-only on SAN.We do not want anyone to

>> > make

>> > changes to that base disk on NTFS on SAN.Is there any way or any other

>>

>> IF you can format the disk as NTFS (which implies that users can

>> AUTHENTICATE

>> to prove their identity and decide their access permissions) then YES,

>> you

>> can

>> certainly set the NTFS permission to allow (a maxium of) READ for those

>> users/groups

>> who should have (only) this privilege.

>>

>> > technology other than MIcrosoft Cluster Services to help make this

>> > happen.

>> > Because what we see is that If some other user tries to access that

>> > NTFS

>> > on

>> > SAN, that user writes its own signature and can delete that

>> > accidentally.We

>> > want to make that NTFS Read-only on SAN

>>

>> It is TRIVIAL to make NTFS "read" (or read-only) so the question is,

>> "Does

>> you

>> SAN hardware/software support NTFS and Authentication?"

>>

>> > Thanks in advance...

>> >

>>

>>

>>

[Guest dcastelino]

Re: NTFS on SAN

 

I get it now...Thanks so much...

 

"Herb Martin" wrote:

>

> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message

> news:560C62CA-CDA4-4D59-BC1D-71C0C231DCB1@microsoft.com...

> > Yes, our SAN does support Windows and its Authentication..So what you are

> > saying is that we can have the NTFS folder on SAN to Read-only.I thought

> > because NTFS is not a cluster file system , each user would write its own

> > signature on NTFS thereby deleting the stuff what the other user wrote..

>

> No, if the File System is NTFS then EVERYONE (even Admins by default)

> will be subject to those permission set by NTFS.

>

> Now, if you LET someone write to the NTFS volume, e.g., create a file, they

> will typically have Full Control of that file or at least be able to reset

> permissions

> to whatever they choose, but notice that this is ONLY IF you allow writing

> and they then become the owner of the files they write.

>

> You can easily setup an NTFS Volume (or even a Share point) that is ONLY

> Readable by certain people or even by everyone (Obviously you will need some

> administrative method to put the files out there in the latter case, but

> this is

> trivially doable.

>

> This is just the way that NTFS (or pretty much ANY permission system) works.

>

> I don't know why you keep referencing some "own signature" because such has

> nothing to do with it.

>

> Each users SID is used when they CREATE an object (i.e., a File) to

> establish the

> OWNER of that file, and that file only.

>

>

> > "Herb Martin" wrote:

> >

> >>

> >> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message

> >> news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com...

> >> >I know NTFS is not a Cluster File System.But this is what we are trying

> >> >to

> >> > acheive by implementing NTFS on SAN:

> >>

> >> That depends on the SAN hardware and software, i.e., the features of

> >> Windows

> >> that it supports. Probably 'yes' in many/most cases.

> >>

> >> > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and

> >> > create

> >> > linked-clones (delta disks) on local storage on the server.Here is the

> >> > question:

> >>

> >> > Can we make NTFS Partition Read-only on SAN.We do not want anyone to

> >> > make

> >> > changes to that base disk on NTFS on SAN.Is there any way or any other

> >>

> >> IF you can format the disk as NTFS (which implies that users can

> >> AUTHENTICATE

> >> to prove their identity and decide their access permissions) then YES,

> >> you

> >> can

> >> certainly set the NTFS permission to allow (a maxium of) READ for those

> >> users/groups

> >> who should have (only) this privilege.

> >>

> >> > technology other than MIcrosoft Cluster Services to help make this

> >> > happen.

> >> > Because what we see is that If some other user tries to access that

> >> > NTFS

> >> > on

> >> > SAN, that user writes its own signature and can delete that

> >> > accidentally.We

> >> > want to make that NTFS Read-only on SAN

> >>

> >> It is TRIVIAL to make NTFS "read" (or read-only) so the question is,

> >> "Does

> >> you

> >> SAN hardware/software support NTFS and Authentication?"

> >>

> >> > Thanks in advance...

> >> >

> >>

> >>

> >>

>

>

>