NTFS permissions for a user on another computer in case of a disk moving in a cluster?

Question

Is there a way to set NTFS permissions for a user on another computer?

I have two nodes in a failover cluster. Both have a specific user account ("charley") local to the node. Charley has files on a disk that is part of a cluster group and in the case of a failover will move to the other node.

Is there a way to configure permissions so that while Node1\Charley creates a file on the disk, Node2\Charley can access (and modify) it after a failover?

score 0 · Answer 1 · answered Jan 20 '12 at 13:07

0

You can set permissions for users unknown to the local system by specifying the SID instead of the user name. You need a tool that accepts SIDs, of course. SetACL does.

It might be simpler to make "charley" a member of one of the predefined local groups like "users" which have a well-known SID (i.e. the same SID on every computer) and set permissions for that group instead of the local user.

answered Jan 20 '12 at 13:07

Helge Klein

2,101
1
16
22

I tried setting the permissions using the SID and icacls and icacls announced that "No mapping between account names and security IDs was done.". I tried Powershell set-acl but it doesn't support SIDs. – Andrew J. Brehm Jan 20 '12 at 14:15
Why don't you try SetACL as suggested? – Helge Klein Jan 20 '12 at 16:00
I found a SetACL which is a third-party tool. I cannot use third-party tools for this project. – Andrew J. Brehm Jan 20 '12 at 16:58

NTFS permissions for a user on another computer in case of a disk moving in a cluster?

1 Answers1