{"id":106,"date":"2017-08-21T21:40:58","date_gmt":"2017-08-21T21:40:58","guid":{"rendered":"http:\/\/sites.lifesci.ucla.edu\/lssa-desktop-support\/?p=106"},"modified":"2017-08-30T23:04:39","modified_gmt":"2017-08-30T23:04:39","slug":"lsrs-lab-setup","status":"publish","type":"post","link":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/lsrs-lab-setup\/","title":{"rendered":"LSRS lab setup"},"content":{"rendered":"

Adding a lab and its users to LSRS<\/strong><\/span><\/h2>\n

Create File Share Group and user in lsrs.ucla.edu AD<\/strong><\/p>\n

    \n
  1. In “File Sharing Group” OU create “PILastName Lab” Security group. Ex. “Clark Lab”<\/li>\n
  2. Make the group a member of the “LSRS Share Group”. Ex. “Clark Lab” is a member of “LSRS Share Group” group.<\/li>\n
  3. Create user objects in “Lab Users” OU. User name to be the same as their UCLA Logon ID. Ex. “clarka”<\/li>\n
  4. Add user objects to their appropriate lab “File Sharing Group”. Ex. “clarka” is a member of “Clark Lab” group.<\/li>\n<\/ol>\n

    Creating the local lab directory\/Simple Volume on rad0.lsrs.ucla.edu<\/strong><\/p>\n

      \n
    1. On rad0.lsrs.ucla.edu in “Disk Management” create “New Simple Volume…”<\/li>\n
    2. On “Assign Drive Letter or Path” screen choose “Mount in the following empty NTFS folder:”<\/li>\n
    3. Select “Browse…” -> “E:\\” -> “Labs”<\/li>\n
    4. Select “New Folder…” ->”PILastName” Ex. Clark<\/li>\n
    5. Select “Next” and in “Format Partition” screen input “PILastName in “Volume label:” field. Ex. Clark<\/li>\n
    6. Select “Next” -> “Finish”<\/li>\n<\/ol>\n

      Assigning NTFC permission on the new “Simple Volume”<\/h4>\n
        \n
      1. On rad0.lsrs.ucla.edu in “Disk Management”, right-click and select “Properties”<\/li>\n
      2. Select “Security” tab -> “Advanced”<\/li>\n
      3. Remove the following Principals: Everyone and Users (will be two ACLs)<\/li>\n
      4. \u00a0Add the following Principals:\n
          \n
        1. “PIUCLA Logon” Ex. clarka with the following ACL\n
            \n
          1. Allow, This folder, subfolders, and files, “Modify” permissions<\/li>\n<\/ol>\n<\/li>\n
          2. “Domain Users” group with the following ALC\n
              \n
            1. Allow, This folder only, and “Traverse” permissions<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

              Setting NTFS permissions on Lab drive\/folder<\/h4>\n
                \n
              1. Right click on the E:\\Labs\\”PILastName” folder and select “Properties…”\u00a0Ex. e:\\Labs\\Clark<\/li>\n
              2. \u00a0Select the “Security” tab -> “Advanced” button.<\/li>\n
              3. In “Advanced Security Settings for PILastName” window click “Add”.<\/li>\n
              4. Click “Select a principal” link and add the\u00a0“PILastName Lab”. Ex. “Clark Lab” with the following ALC\n
                  \n
                1. Allow, This folder only, and “Traverse” permissions<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

                  Creating the shared “Lab” folder<\/strong><\/p>\n

                    \n
                  1. On rad0.lsrs.ucla.edu create user folder\u00a0E:\\Labs\\”PILastName”\\Lab. Ex. E:\\Labs\\Clark\\Lab<\/li>\n
                  2. Right click on the “Lab” folder and select “Properties…”<\/li>\n
                  3. \u00a0Select the “Security” tab -> “Advanced” button.<\/li>\n
                  4. In “Advanced Security Settings for Lab” window click “Add”.<\/li>\n
                  5. Click “Select a principal” link and add the\u00a0“PILastName Lab”. Ex. “Clark Lab” with the following ALC\n
                      \n
                    1. Allow, This folder only, and “Traverse” permissions<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

                      Creating the “user” (non PI) folder<\/strong><\/p>\n

                        \n
                      1. On rad0.lsrs.ucla.edu create user folder\u00a0E:\\Labs\\”PILastName”\\”UCLA Logon”. Ex. E:\\Labs\\Clark\\timhunt<\/li>\n
                      2. Right click on the “UCLA Logon” folder and select “Properties…”<\/li>\n
                      3. \u00a0Select the “Security” tab -> “Advanced” button.<\/li>\n
                      4. In “Advanced Security Settings for UCLALogon” window click “Add”.<\/li>\n
                      5. Click “Select a principal” link and add the\u00a0“UCLA Logon”. Ex. “timhunt”with the following ALC\n
                          \n
                        1. Allow, This folder, subfolders, and files, “Modify” permissions<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

                          Creating the PI “user” folder<\/strong><\/p>\n

                            \n
                          1. On rad0.lsrs.ucla.edu create user folder\u00a0E:\\Labs\\”PILastName”\\”UCLA Logon”. Ex. E:\\Labs\\Clark\\clarka\n
                              \n
                            1. They will (and only they) will get permissions for the folder via inheritance at the “Simple Volume” level<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

                              Create “Share point” (“New Folder…”) in the DFS Namespace and setting DFS viewing permissions. Note: this needs to be\u00a0done with a users that\u00a0sufficient “Share Permissions”. Ex. lssacsc@lsrs.ucla.edu<\/strong><\/p>\n

                                \n
                              1. In the “DSF Management” tool create the lab folder in the following location:\n
                                  \n
                                1. DFS Management -> Namespaces -> \\\\lsrs.ucla.edu\\Labs\n
                                    \n
                                  1. Right click ” ” and select “New Folder…”<\/li>\n
                                  2. In the “Name:” field input “PILastName” Ex. Lin<\/li>\n
                                  3. In “Folder targets:” box click “Add…” and input location of the local lab directory. Ex. \\\\rad0.lsrs.ucla.edu\\Lab\\Lin<\/li>\n
                                  4. Right click the folder and select “Properties…”\n
                                      \n
                                    1. Select the “Advanced” tab and check the “Set explicit view permission on the DFS folder”.<\/li>\n
                                    2. Click “Configure view permissions” and “Add” the “PILastName Lab” group to have “Read”. Ex. “Lin Lab”<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

                                      Adding a lab and its users to LSRS Create File Share Group and user in lsrs.ucla.edu AD In “File Sharing Group” OU create “PILastName Lab” Security group. Ex. “Clark Lab” […]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-106","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/posts\/106","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/comments?post=106"}],"version-history":[{"count":10,"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/posts\/106\/revisions"}],"predecessor-version":[{"id":1027,"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/posts\/106\/revisions\/1027"}],"wp:attachment":[{"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/media?parent=106"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/categories?post=106"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.lifesci.ucla.edu\/lssa-it\/wp-json\/wp\/v2\/tags?post=106"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}