
SLAG! 🛡️ an invisble layer of protection 🔒
Recently came across one of those problems that sounds straightforward on paper but makes storage admins wake up in a cold sweat: A customer had hundreds of SMB file shares, complex nested directories, and millions - yes, millions of files scattered across every level. Then came the dreaded Monday morning request: "New compliance mandate. We need directory and file auditing enabled on every single object, retroactively." The textbook answer? Simple. Just enable File Access Auditing for SMB in ONTAP and configure the audit ACEs (Access Control Entries). Well... not that simple. In a traditional Windows File Server environment, auditing isn't just a switch you flip. Once you enable the audit policy, you have to apply the actual audit entries to each directory and file. Windows gives you a few ways to do this - Explorer's propagation feature, PowerShell scripts running Set-AuditRule , or third-party tools. But when you're dealing with millions of files, you're looking at a propagation job
Continue reading on Dev.to
Opens in a new tab

