Guest dcastelino Posted April 17, 2008 Posted April 17, 2008 I know NTFS is not a Cluster File System.But this is what we are trying to acheive by implementing NTFS on SAN: We have 2TB of NTFS Partition on SAN.We also have VMware Server running on Windows Server 2003.VMware has capabilties to create linked-clones (delta disks). Our objective is to have the base disk (say 60 GB) on NTFS on SAN and create linked-clones (delta disks) on local storage on the server.Here is the question: Can we make NTFS Partition Read-only on SAN.We do not want anyone to make changes to that base disk on NTFS on SAN.Is there any way or any other technology other than MIcrosoft Cluster Services to help make this happen. Because what we see is that If some other user tries to access that NTFS on SAN, that user writes its own signature and can delete that accidentally.We want to make that NTFS Read-only on SAN Thanks in advance...
Guest Herb Martin Posted April 17, 2008 Posted April 17, 2008 Re: NTFS on SAN "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com... >I know NTFS is not a Cluster File System.But this is what we are trying to > acheive by implementing NTFS on SAN: That depends on the SAN hardware and software, i.e., the features of Windows that it supports. Probably 'yes' in many/most cases. > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and > create > linked-clones (delta disks) on local storage on the server.Here is the > question: > Can we make NTFS Partition Read-only on SAN.We do not want anyone to make > changes to that base disk on NTFS on SAN.Is there any way or any other IF you can format the disk as NTFS (which implies that users can AUTHENTICATE to prove their identity and decide their access permissions) then YES, you can certainly set the NTFS permission to allow (a maxium of) READ for those users/groups who should have (only) this privilege. > technology other than MIcrosoft Cluster Services to help make this happen. > Because what we see is that If some other user tries to access that NTFS > on > SAN, that user writes its own signature and can delete that > accidentally.We > want to make that NTFS Read-only on SAN It is TRIVIAL to make NTFS "read" (or read-only) so the question is, "Does you SAN hardware/software support NTFS and Authentication?" > Thanks in advance... >
Guest dcastelino Posted April 17, 2008 Posted April 17, 2008 Re: NTFS on SAN Yes, our SAN does support Windows and its Authentication..So what you are saying is that we can have the NTFS folder on SAN to Read-only.I thought because NTFS is not a cluster file system , each user would write its own signature on NTFS thereby deleting the stuff what the other user wrote.. "Herb Martin" wrote: > > "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message > news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com... > >I know NTFS is not a Cluster File System.But this is what we are trying to > > acheive by implementing NTFS on SAN: > > That depends on the SAN hardware and software, i.e., the features of Windows > that it supports. Probably 'yes' in many/most cases. > > > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and > > create > > linked-clones (delta disks) on local storage on the server.Here is the > > question: > > > Can we make NTFS Partition Read-only on SAN.We do not want anyone to make > > changes to that base disk on NTFS on SAN.Is there any way or any other > > IF you can format the disk as NTFS (which implies that users can > AUTHENTICATE > to prove their identity and decide their access permissions) then YES, you > can > certainly set the NTFS permission to allow (a maxium of) READ for those > users/groups > who should have (only) this privilege. > > > technology other than MIcrosoft Cluster Services to help make this happen. > > Because what we see is that If some other user tries to access that NTFS > > on > > SAN, that user writes its own signature and can delete that > > accidentally.We > > want to make that NTFS Read-only on SAN > > It is TRIVIAL to make NTFS "read" (or read-only) so the question is, "Does > you > SAN hardware/software support NTFS and Authentication?" > > > Thanks in advance... > > > > >
Guest Herb Martin Posted April 17, 2008 Posted April 17, 2008 Re: NTFS on SAN "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message news:560C62CA-CDA4-4D59-BC1D-71C0C231DCB1@microsoft.com... > Yes, our SAN does support Windows and its Authentication..So what you are > saying is that we can have the NTFS folder on SAN to Read-only.I thought > because NTFS is not a cluster file system , each user would write its own > signature on NTFS thereby deleting the stuff what the other user wrote.. No, if the File System is NTFS then EVERYONE (even Admins by default) will be subject to those permission set by NTFS. Now, if you LET someone write to the NTFS volume, e.g., create a file, they will typically have Full Control of that file or at least be able to reset permissions to whatever they choose, but notice that this is ONLY IF you allow writing and they then become the owner of the files they write. You can easily setup an NTFS Volume (or even a Share point) that is ONLY Readable by certain people or even by everyone (Obviously you will need some administrative method to put the files out there in the latter case, but this is trivially doable. This is just the way that NTFS (or pretty much ANY permission system) works. I don't know why you keep referencing some "own signature" because such has nothing to do with it. Each users SID is used when they CREATE an object (i.e., a File) to establish the OWNER of that file, and that file only. > "Herb Martin" wrote: > >> >> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message >> news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com... >> >I know NTFS is not a Cluster File System.But this is what we are trying >> >to >> > acheive by implementing NTFS on SAN: >> >> That depends on the SAN hardware and software, i.e., the features of >> Windows >> that it supports. Probably 'yes' in many/most cases. >> >> > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and >> > create >> > linked-clones (delta disks) on local storage on the server.Here is the >> > question: >> >> > Can we make NTFS Partition Read-only on SAN.We do not want anyone to >> > make >> > changes to that base disk on NTFS on SAN.Is there any way or any other >> >> IF you can format the disk as NTFS (which implies that users can >> AUTHENTICATE >> to prove their identity and decide their access permissions) then YES, >> you >> can >> certainly set the NTFS permission to allow (a maxium of) READ for those >> users/groups >> who should have (only) this privilege. >> >> > technology other than MIcrosoft Cluster Services to help make this >> > happen. >> > Because what we see is that If some other user tries to access that >> > NTFS >> > on >> > SAN, that user writes its own signature and can delete that >> > accidentally.We >> > want to make that NTFS Read-only on SAN >> >> It is TRIVIAL to make NTFS "read" (or read-only) so the question is, >> "Does >> you >> SAN hardware/software support NTFS and Authentication?" >> >> > Thanks in advance... >> > >> >> >>
Guest dcastelino Posted April 18, 2008 Posted April 18, 2008 Re: NTFS on SAN I get it now...Thanks so much... "Herb Martin" wrote: > > "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message > news:560C62CA-CDA4-4D59-BC1D-71C0C231DCB1@microsoft.com... > > Yes, our SAN does support Windows and its Authentication..So what you are > > saying is that we can have the NTFS folder on SAN to Read-only.I thought > > because NTFS is not a cluster file system , each user would write its own > > signature on NTFS thereby deleting the stuff what the other user wrote.. > > No, if the File System is NTFS then EVERYONE (even Admins by default) > will be subject to those permission set by NTFS. > > Now, if you LET someone write to the NTFS volume, e.g., create a file, they > will typically have Full Control of that file or at least be able to reset > permissions > to whatever they choose, but notice that this is ONLY IF you allow writing > and they then become the owner of the files they write. > > You can easily setup an NTFS Volume (or even a Share point) that is ONLY > Readable by certain people or even by everyone (Obviously you will need some > administrative method to put the files out there in the latter case, but > this is > trivially doable. > > This is just the way that NTFS (or pretty much ANY permission system) works. > > I don't know why you keep referencing some "own signature" because such has > nothing to do with it. > > Each users SID is used when they CREATE an object (i.e., a File) to > establish the > OWNER of that file, and that file only. > > > > "Herb Martin" wrote: > > > >> > >> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message > >> news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com... > >> >I know NTFS is not a Cluster File System.But this is what we are trying > >> >to > >> > acheive by implementing NTFS on SAN: > >> > >> That depends on the SAN hardware and software, i.e., the features of > >> Windows > >> that it supports. Probably 'yes' in many/most cases. > >> > >> > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and > >> > create > >> > linked-clones (delta disks) on local storage on the server.Here is the > >> > question: > >> > >> > Can we make NTFS Partition Read-only on SAN.We do not want anyone to > >> > make > >> > changes to that base disk on NTFS on SAN.Is there any way or any other > >> > >> IF you can format the disk as NTFS (which implies that users can > >> AUTHENTICATE > >> to prove their identity and decide their access permissions) then YES, > >> you > >> can > >> certainly set the NTFS permission to allow (a maxium of) READ for those > >> users/groups > >> who should have (only) this privilege. > >> > >> > technology other than MIcrosoft Cluster Services to help make this > >> > happen. > >> > Because what we see is that If some other user tries to access that > >> > NTFS > >> > on > >> > SAN, that user writes its own signature and can delete that > >> > accidentally.We > >> > want to make that NTFS Read-only on SAN > >> > >> It is TRIVIAL to make NTFS "read" (or read-only) so the question is, > >> "Does > >> you > >> SAN hardware/software support NTFS and Authentication?" > >> > >> > Thanks in advance... > >> > > >> > >> > >> > > >
Recommended Posts