{"id":76642,"date":"2023-06-05T13:11:45","date_gmt":"2023-06-05T17:11:45","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=76642"},"modified":"2023-06-05T13:11:45","modified_gmt":"2023-06-05T17:11:45","slug":"manage-nfs-in-jumpcloud","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/manage-nfs-in-jumpcloud","title":{"rendered":"Manage NFS in JumpCloud"},"content":{"rendered":"\n
Managing a file server using JumpCloud is very similar to managing permissions with Active Directory. The main difference is that the JumpCloud agent is deployed on the file server to maintain local accounts, instead of granting permissions via domain accounts. Access to a given folder is granted by defining local groups, then adding the local user to the appropriate local group.<\/p>\n\n\n\n
Prerequisites<\/strong>:<\/p>\n\n\n\n For this example, we\u2019ll take the following actions:<\/p>\n\n\n\n JumpCloud provides multiple methods with which you can install the Agent to your local system: Install the Agent<\/a>.<\/p>\n\n\n\n If you currently use configuration management software like SCCM or JAMF, you can leverage them to deploy and install the Agent to your environment. You can also automate the installation process in other ways: Install the Agent from Command Line<\/a>.<\/p>\n\n\n\n In order to grant access to this system for our test user, we’ll need to bind the user to the system resource. If you’re unfamiliar with binding users to resources, see Connect New Users to Resources<\/a>.<\/p>\n\n\n\n Now let’s define a specific group that will have explicit access to this share. Run the New-LocalGroup PowerShell command<\/a> to create a new group:<\/p>\n\n\n\n New-LocalGroup -Name “TestGroup”<\/p>\n<\/div><\/div>\n\n\n\n Then, we’ll run the New-Item command<\/a> to create a new directory:<\/p>\n\n\n\n New-Item -Path “c:\\” -Name “test-share” -ItemType “directory”<\/p>\n<\/div><\/div>\n\n\n\n Finally, we’ll create the share itself based on this new directory with the New-SmbShare command<\/a>, and grant both our new test group and the local administrators group access to it:<\/p>\n\n\n\n New-SmbShare -Name “TestShare” -Path “C:\\test-share” -FullAccess “LocalTest\\Administrator”, “LocalTest\\TestGroup”<\/p>\n<\/div><\/div>\n\n\n\n In order to add our user to our new test group, we’ll be leveraging the Commands feature in the JumpCloud Admin Portal. Navigate to Commands<\/strong> and create a new command. Run the Add-LocalGroupMember PowerShell command<\/a> against the target system:<\/p>\n\n\n\n Add-LocalGroupMember -Group “TestGroup” -Member “TestUser”<\/p>\n<\/div><\/div>\n\n\n\n The command will take at least 60 seconds to complete. Once it has completed, you can verify the group membership of the user on the local system.<\/p>\n\n\n\n On a Windows system, accessing the share is as simple as navigating to the network directory itself. Based on the examples above, our network share in this case would be \\LocalTest\\test-share\\<\/strong>.<\/p>\n\n\n\n For Mac systems, open the Finder and press \u2318+K <\/strong>to access the Connect to Server dialogue, then type Voila! You now have a new share. Depending on how often new shares are created, you can automate their creation by leveraging our Commands feature plus our API:<\/p>\n\n\n\n Managing a file server using JumpCloud is very similar to managing permissions with Active Directory. The main difference is that […]<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2856],"support_tag":[],"coauthors":[2842],"acf":[],"yoast_head":"\n\n
\n
\n
Install the JumpCloud Agent<\/h2>\n\n\n\n
Provision Local Accounts<\/h2>\n\n\n\n
Create a Local Group and Define Permissions<\/h2>\n\n\n\n
Add the User to a Local Group<\/h2>\n\n\n\n
Access the Share<\/h2>\n\n\n\n
smb:\/\/LocalTest\/test-share\/<\/code> and you’ll be prompted to authenticate. Once authenticated, you’ll have access to the share.<\/p>\n\n\n\n
\n