test

Solstice NFS Client 3.2 User's Guide for Microsoft Windows 95 and Windows NT

NFS Server on Windows NT

On Windows NT, NFS Server runs as a service. This allows NFS Server to run in the background without requiring that the user who provides the service be logged in.

By default, NFS Server is set to be started manually under the system Administrator's account (Local System Account.) You can change the setting to have NFS Server start automatically.

The NFS Sharing property sheet is accessible only to NT Power Users and above and is not displayed in accounts of ordinary users. The Sharing property sheet is accessible by means of two commands:

NFS Server supports only Version 2 of NFS over UDP.

NFS Server does not support file locking/sharing.

Running NFS Server

By default, the local system account is the Administrator's account. You must be logged in as an Administrator or as an NT Power User with Full Control access rights to carry out the following procedures.

To Start NFS Server from the Local System Account

  1. Click the Start button, point to Settings, click Control Panel, and then double-click Services.

  2. Select Solstice NFS Server and proceed as follows:

    • To start the service manually, click Start.

    • To start the service automatically, click Startup, select Automatic, click OK and then click Start.

  3. Click Close.

    NFS Server will start the next time you start Windows NT.

To Start NFS Server from a Specific User Account

  1. Click the Start button, point to Settings, click Control Panel, and then double-click Services.

  2. Select Solstice NFS Server and click Startup.

  3. In Log On As, click the option This Account.

  4. Either type the account name manually, or click the More (...) button to select the account name from the Names list.

  5. Type the password, confirm it, and then click OK.

To Stop NFS Server

  1. Click the Start button, point to Settings, click Control Panel, and then double-click Services.

  2. Select Solstice NFS Server and click Stop.

    An informational message indicates that the NFS Server service is stopped.

  3. Click Close.

Granting Access to Shared Resources on Windows NT

You can grant access to a file or directory by selecting it in Explorer and designating it as an NFS shared folder or device. You can restrict access by system rather than by user, and by specifying Read-Only or Full access rights.

To Share Folders and Drives

  1. If necessary, start NFS Server.

    Note that you can export folders and local drives without NFS Server running. However, the exported shares will not become available until you start NFS Server.

  2. Start Explorer or My Computer.

  3. In My Computer or in the Explorer folders pane, select the device or the folder that contains the files you want to share.

  4. Right-click to open the pop-up menu and then click Properties.

    The property sheet for the selected device or folder opens.

  5. Click the NFS Sharing tab.

  6. Click the Shared As option.

    The name of the selected device or folder appears in the Share Name field. Optionally, replace the name with a name that is meaningful to users when they browse the PC as an NFS Server.

  7. Specify the type of access.

    • Read-Only: Users of remote systems can display the contents of the shared folder or drive, or execute any executable therein. They cannot modify or delete any files or folders in the shared folder or drive.

    • Full: Users of remote systems can read, write, execute, and delete the shared folder or drive. These permissions are subject to restrictions that may apply on a folder or file-by-file basis on an NTFS file system.

  8. Specify which access restrictions apply.

    • Click Unrestricted if you want to allow all network systems to access the shared folder or device with the type of access specified in Step 7.

    • Click Restricted and then click Access Restrictions. The Access List dialog box opens.

  9. Complete the Access List dialog box as follows.

    1. Enter the name of the system whose users may access the shared folder or device, or select from the list of systems.

    2. Click Add.

      The system name appears in the Clients Granted Access field.

    3. Click OK.

      The Access List dialog box closes.

  10. Click OK.

    The property sheet closes.

To Remove Access to Shared Resources on Windows NT

  1. Start Explorer.

  2. In the Explorer folders pane, select the device or the folder for which you want to revoke access.

  3. Right-click to open the pop-up menu and then click Properties.

    The property sheet for the selected folder opens.

  4. Click the NFS Sharing tab.

  5. (Optional) Change the access type.

  6. In Access Restrictions, select the Restricted option, and then click the Access List button.

    The Access List dialog box opens.

  7. In Clients Granted Access, select the name of the system whose users may no longer access the shared folder or device, and then click Delete.

    If necessary, repeat the previous step for additional systems.

  8. When you are finished, click OK to return to the property sheet.

  9. Click OK.

    The property sheet closes.

    Users on the systems that were removed immediately lose access to the device or folders.

Viewing Exported Folders and Drives on Windows NT

Folders or local drives that are shared using Windows NT sharing options are recognized by the "folder with hand" icon in the Explorer window. Solstice NFS Server uses a different mechanism for identifying folders or local drives that are shared using NFS Server.

To View a List of Exported Folders and Drives

  1. Double-click Network Neighborhood.

  2. Double-click Entire Network and then double-click NFS Servers.

  3. Browse for your Windows NT system.

  4. Double-click the name of your system to display a list of your exported folders and drives.

  5. (Optional) To view the share details, right-click an export and click Properties.

    If the export has been shared using NFS Server, then the same NFS Sharing Properties page that was used to specify the sharing attributes, opens.

How NFS Server Handles Access Requests from Remote Hosts

When NFS Server receives an access request from a remote host, it verifies the following.

If the answer to any of these verifications is no, access to the exported share is denied. If the answer to all verifications is yes, access to the exported share is granted.

In order to share folders or drives, the user exporting the folder or drive must be an NT Power User or above. The NFS sharing property sheet is not visible to ordinary users. Once shared, the resource remains shared regardless of the current user logged in. Note that folders and drives can be shared using the Microsoft Sharing tab independently of using Solstice NFS Sharing.

Security Control When Sharing Folders and Drives

By default, NFS Server runs as a LocalSystem service from the system account. Usually, this is the Administrator's account which, also by default, has Full Control access rights. NFS Server does not change existing NT permissions on directories and files. If the remote system has Full access rights to the exported share, NFS Server exports the file system privileges of the local user (that is, the user account under which NFS Server is started) to the remote system. This is important in the case of Windows NT with an NTFS file system where files have been marked with additional security attributes.

In effect, a remote user on an NFS Client who accesses files on a Windows NT machine, has the privileges of the account under which the NFS Server service is started.

Limiting Remote System Access

You can limit the access privileges of users on remote systems as follows.