samba - Jun 2020 - nt acl support

Hi, 

Is there any drawbacks of using "nt acl support = No" on a share ? I
mean breaking applications ?

I do not want users to change permissions from Windows. 

With nt acl support = No, icacls returns no permissions Users have Full Control.

It's fine for me that Security tab disappears. 

Users can access Linux shell, and i only want users to modify permissions from
Linux.

I'm using samba as a file server on a legacy domain samba3 / ldap (with same
users and password as my new AD domain), until a full migration.

Eric

On Thu, Jun 18, 2020 at 04:31:19PM +0200, ERIC PEYREMORTE via samba
wrote:
> Hi, 
> 
> Is there any drawbacks of using "nt acl support = No" on a share
? I mean breaking applications ?
> 
> I do not want users to change permissions from Windows. 
> 
> With nt acl support = No, icacls returns no permissions Users have Full
Control.
> 
> It's fine for me that Security tab disappears. 
> 
> Users can access Linux shell, and i only want users to modify permissions
from Linux.
> 
> I'm using samba as a file server on a legacy domain samba3 / ldap (with
same users and password as my new AD domain), until a full migration.
Some Windows apps won't work without ACL support.
You'll have to try on a case-by-case basis to see
if this works for you.