Requirements
Sureview requires a Windows Network Share (SMB) to store audited media to in accordance with the Minimum Requirements.
Location Options
The share can be hosted...
- by your IT team (for example via a redundant high performance SAN)
- on the Sureview servers themselves
Guidance: Managing Shares
To manage file shares on a Windows Server use the following PowerShell commands (this method works on a server regardless of having a GUI available - to use the Windows GUI refer to Microsoft documentation).
Listing shares
Run the following command to list the shares on a computer with their names and folder paths:
Get-SmbShare
Run the following command to list the Access Control List (ACL) for a specific share:
Get-SmbShareAccess -Name YourShareName
Run the following command to list the Access Control List (ACL) for a specific folder as a nicely formatted list (remember that the user must have access both to the share and the folder itself):
Get-ACL -Path C:\Your\Folder | Format-List
Creating shares
Run the following command to create a new folder, share it with the given name, and give write permissions to the folder and share to the Sureview service user:
$path = "C:\Filestore";
$serviceuser = "yourdomain\Sureviewservice";
Write-Host "Creating directory";
New-Item -Path $path -Type "directory";
Write-Host "Setting directory permissions";
$AR = New-Object System.Security.AccessControl.FileSystemAccessRule($serviceuser, "Modify", "ContainerInherit, ObjectInherit", "None", "Allow");
$ACL = Get-Acl $path;
$ACL.SetAccessRule($AR);
Set-Acl $path $ACL;
Write-Host "Creating share";
New-SmbShare -Name "Filestore" -Path $path -FullAccess "Administrators" -ChangeAccess $serviceuser;
Comments
0 comments
Please sign in to leave a comment.