Modifying a Windows User Mapping

Procedure

1. Choose Resources > Access > Authentication User > User Mappings > Windows to UNIX.
2. Select the desired account from the Account drop-down list in the upper left corner.
3. Click More on the right of the desired Windows user mapping and select Modify.

   The Modify User Mapping page is displayed on the right.

4. Set basic Windows user mapping parameters.

   Table 1 describes related parameters.

   Table 1 Basic Windows user mapping parameters

   Parameter	Description
   Mapping Mode	Windows to UNIX: When accessing UNIX shares using Windows, a Windows user has all the permissions granted to the target user.
   Source User	Indicates the source user in the mapping. NOTE: The name of the source user supports the wildcard (*). For example, user* indicates all user names starting with user. Mappings cannot be created for users in the Administrators group reserved by the system. If the source user is a user in the Administrators group, the created mapping is invalid. When you use the wildcard (*) to create a mapping, the mappings of users except those in the Administrators group take effect. The user name can be a common or domain user name. An AD domain user name uses a backslash (\) to connect the domain name and user name. Only one backslash (\) is allowed, for example, china\user001. The AD domain name supports only the NetBIOS name. You can query the NetBIOS name of a domain by running the nbtstat -n command on the CLI. Alternatively, you can right-click the domain on the Active Directory Users and Computers page, choose Properties from the shortcut menu, and view the value of Domain name (pre-Windows 2000) in the dialog box that is displayed. The value is the NetBIOS name of the domain.
   Target User	Indicates the target user in the mapping. NOTE: The user name can be a common or domain user name. An AD domain user name uses a backslash (\) to connect the domain name and user name. Only one backslash (\) is allowed, for example, china\user001. The AD domain name supports only the NetBIOS name. You can query the NetBIOS name of a domain by running the nbtstat -n command on the CLI. Alternatively, you can right-click the domain on the Active Directory Users and Computers page, choose Properties from the shortcut menu, and view the value of Domain name (pre-Windows 2000) in the dialog box that is displayed. The value is the NetBIOS name of the domain.
   Priority	Indicates the priority of the mapping. A smaller value indicates a higher priority. When multiple mappings share the same source user, the system uses the mapping with the highest priority. [Value range] 1 to 32

5. Click OK.