NTFS on SAN

  • Thread starter Thread starter dcastelino
  • Start date Start date
D

dcastelino

Guest
I know NTFS is not a Cluster File System.But this is what we are trying to
acheive by implementing NTFS on SAN:

We have 2TB of NTFS Partition on SAN.We also have VMware Server running on
Windows Server 2003.VMware has capabilties to create linked-clones (delta
disks).

Our objective is to have the base disk (say 60 GB) on NTFS on SAN and create
linked-clones (delta disks) on local storage on the server.Here is the
question:

Can we make NTFS Partition Read-only on SAN.We do not want anyone to make
changes to that base disk on NTFS on SAN.Is there any way or any other
technology other than MIcrosoft Cluster Services to help make this happen.
Because what we see is that If some other user tries to access that NTFS on
SAN, that user writes its own signature and can delete that accidentally.We
want to make that NTFS Read-only on SAN

Thanks in advance...
 
Re: NTFS on SAN


"dcastelino" <dcastelino@discussions.microsoft.com> wrote in message
news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com...
>I know NTFS is not a Cluster File System.But this is what we are trying to
> acheive by implementing NTFS on SAN:

That depends on the SAN hardware and software, i.e., the features of Windows
that it supports. Probably 'yes' in many/most cases.

> Our objective is to have the base disk (say 60 GB) on NTFS on SAN and
> create
> linked-clones (delta disks) on local storage on the server.Here is the
> question:

> Can we make NTFS Partition Read-only on SAN.We do not want anyone to make
> changes to that base disk on NTFS on SAN.Is there any way or any other

IF you can format the disk as NTFS (which implies that users can
AUTHENTICATE
to prove their identity and decide their access permissions) then YES, you
can
certainly set the NTFS permission to allow (a maxium of) READ for those
users/groups
who should have (only) this privilege.

> technology other than MIcrosoft Cluster Services to help make this happen.
> Because what we see is that If some other user tries to access that NTFS
> on
> SAN, that user writes its own signature and can delete that
> accidentally.We
> want to make that NTFS Read-only on SAN

It is TRIVIAL to make NTFS "read" (or read-only) so the question is, "Does
you
SAN hardware/software support NTFS and Authentication?"

> Thanks in advance...
>
 
Re: NTFS on SAN

Yes, our SAN does support Windows and its Authentication..So what you are
saying is that we can have the NTFS folder on SAN to Read-only.I thought
because NTFS is not a cluster file system , each user would write its own
signature on NTFS thereby deleting the stuff what the other user wrote..

"Herb Martin" wrote:

>
> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message
> news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com...
> >I know NTFS is not a Cluster File System.But this is what we are trying to
> > acheive by implementing NTFS on SAN:
>
> That depends on the SAN hardware and software, i.e., the features of Windows
> that it supports. Probably 'yes' in many/most cases.
>
> > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and
> > create
> > linked-clones (delta disks) on local storage on the server.Here is the
> > question:
>
> > Can we make NTFS Partition Read-only on SAN.We do not want anyone to make
> > changes to that base disk on NTFS on SAN.Is there any way or any other
>
> IF you can format the disk as NTFS (which implies that users can
> AUTHENTICATE
> to prove their identity and decide their access permissions) then YES, you
> can
> certainly set the NTFS permission to allow (a maxium of) READ for those
> users/groups
> who should have (only) this privilege.
>
> > technology other than MIcrosoft Cluster Services to help make this happen.
> > Because what we see is that If some other user tries to access that NTFS
> > on
> > SAN, that user writes its own signature and can delete that
> > accidentally.We
> > want to make that NTFS Read-only on SAN
>
> It is TRIVIAL to make NTFS "read" (or read-only) so the question is, "Does
> you
> SAN hardware/software support NTFS and Authentication?"
>
> > Thanks in advance...
> >
>
>
>
 
Re: NTFS on SAN


"dcastelino" <dcastelino@discussions.microsoft.com> wrote in message
news:560C62CA-CDA4-4D59-BC1D-71C0C231DCB1@microsoft.com...
> Yes, our SAN does support Windows and its Authentication..So what you are
> saying is that we can have the NTFS folder on SAN to Read-only.I thought
> because NTFS is not a cluster file system , each user would write its own
> signature on NTFS thereby deleting the stuff what the other user wrote..

No, if the File System is NTFS then EVERYONE (even Admins by default)
will be subject to those permission set by NTFS.

Now, if you LET someone write to the NTFS volume, e.g., create a file, they
will typically have Full Control of that file or at least be able to reset
permissions
to whatever they choose, but notice that this is ONLY IF you allow writing
and they then become the owner of the files they write.

You can easily setup an NTFS Volume (or even a Share point) that is ONLY
Readable by certain people or even by everyone (Obviously you will need some
administrative method to put the files out there in the latter case, but
this is
trivially doable.

This is just the way that NTFS (or pretty much ANY permission system) works.

I don't know why you keep referencing some "own signature" because such has
nothing to do with it.

Each users SID is used when they CREATE an object (i.e., a File) to
establish the
OWNER of that file, and that file only.


> "Herb Martin" wrote:
>
>>
>> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message
>> news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com...
>> >I know NTFS is not a Cluster File System.But this is what we are trying
>> >to
>> > acheive by implementing NTFS on SAN:
>>
>> That depends on the SAN hardware and software, i.e., the features of
>> Windows
>> that it supports. Probably 'yes' in many/most cases.
>>
>> > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and
>> > create
>> > linked-clones (delta disks) on local storage on the server.Here is the
>> > question:
>>
>> > Can we make NTFS Partition Read-only on SAN.We do not want anyone to
>> > make
>> > changes to that base disk on NTFS on SAN.Is there any way or any other
>>
>> IF you can format the disk as NTFS (which implies that users can
>> AUTHENTICATE
>> to prove their identity and decide their access permissions) then YES,
>> you
>> can
>> certainly set the NTFS permission to allow (a maxium of) READ for those
>> users/groups
>> who should have (only) this privilege.
>>
>> > technology other than MIcrosoft Cluster Services to help make this
>> > happen.
>> > Because what we see is that If some other user tries to access that
>> > NTFS
>> > on
>> > SAN, that user writes its own signature and can delete that
>> > accidentally.We
>> > want to make that NTFS Read-only on SAN
>>
>> It is TRIVIAL to make NTFS "read" (or read-only) so the question is,
>> "Does
>> you
>> SAN hardware/software support NTFS and Authentication?"
>>
>> > Thanks in advance...
>> >
>>
>>
>>
 
Re: NTFS on SAN

I get it now...Thanks so much...

"Herb Martin" wrote:

>
> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message
> news:560C62CA-CDA4-4D59-BC1D-71C0C231DCB1@microsoft.com...
> > Yes, our SAN does support Windows and its Authentication..So what you are
> > saying is that we can have the NTFS folder on SAN to Read-only.I thought
> > because NTFS is not a cluster file system , each user would write its own
> > signature on NTFS thereby deleting the stuff what the other user wrote..
>
> No, if the File System is NTFS then EVERYONE (even Admins by default)
> will be subject to those permission set by NTFS.
>
> Now, if you LET someone write to the NTFS volume, e.g., create a file, they
> will typically have Full Control of that file or at least be able to reset
> permissions
> to whatever they choose, but notice that this is ONLY IF you allow writing
> and they then become the owner of the files they write.
>
> You can easily setup an NTFS Volume (or even a Share point) that is ONLY
> Readable by certain people or even by everyone (Obviously you will need some
> administrative method to put the files out there in the latter case, but
> this is
> trivially doable.
>
> This is just the way that NTFS (or pretty much ANY permission system) works.
>
> I don't know why you keep referencing some "own signature" because such has
> nothing to do with it.
>
> Each users SID is used when they CREATE an object (i.e., a File) to
> establish the
> OWNER of that file, and that file only.
>
>
> > "Herb Martin" wrote:
> >
> >>
> >> "dcastelino" <dcastelino@discussions.microsoft.com> wrote in message
> >> news:53066886-E54B-4151-A6A5-91C1033E2149@microsoft.com...
> >> >I know NTFS is not a Cluster File System.But this is what we are trying
> >> >to
> >> > acheive by implementing NTFS on SAN:
> >>
> >> That depends on the SAN hardware and software, i.e., the features of
> >> Windows
> >> that it supports. Probably 'yes' in many/most cases.
> >>
> >> > Our objective is to have the base disk (say 60 GB) on NTFS on SAN and
> >> > create
> >> > linked-clones (delta disks) on local storage on the server.Here is the
> >> > question:
> >>
> >> > Can we make NTFS Partition Read-only on SAN.We do not want anyone to
> >> > make
> >> > changes to that base disk on NTFS on SAN.Is there any way or any other
> >>
> >> IF you can format the disk as NTFS (which implies that users can
> >> AUTHENTICATE
> >> to prove their identity and decide their access permissions) then YES,
> >> you
> >> can
> >> certainly set the NTFS permission to allow (a maxium of) READ for those
> >> users/groups
> >> who should have (only) this privilege.
> >>
> >> > technology other than MIcrosoft Cluster Services to help make this
> >> > happen.
> >> > Because what we see is that If some other user tries to access that
> >> > NTFS
> >> > on
> >> > SAN, that user writes its own signature and can delete that
> >> > accidentally.We
> >> > want to make that NTFS Read-only on SAN
> >>
> >> It is TRIVIAL to make NTFS "read" (or read-only) so the question is,
> >> "Does
> >> you
> >> SAN hardware/software support NTFS and Authentication?"
> >>
> >> > Thanks in advance...
> >> >
> >>
> >>
> >>
>
>
>
 
Back
Top