The vserver cifs group-policy restricted-group show-defined command displays settings of all the restricted groups defined in Domain Controller for a Vserver.

If you do not specify any parameters, the command displays the following information about all the restricted groups defined in Domain Controller for all the Vservers in the cluster.

Group Policy Name: Specifies the name of the group policy.
Version: Specifies the version of the group policy.
Link: Specifies the level in which the group policy is configured. Possible values are:
Local: Group policy is configured in Data ONTAP.
Site: Group policy is configured at the site level in the Domain Controller.
Domain: Group policy is configured at the domain level in the Domain Controller.
OrganizationalUnit: Group policy is configured at the OU level in the Domain Controller.
RSOP: Resultant set of policies derived from all the group policies defined at various levels.
Group Name: Specifies the name of a restricted group.
Members: Specifies users and groups who belong to and who do not belong to the restricted group.
MemberOf: Specifies list of groups to which the restricted group is added. A group can be a member of groups other than the groups listed here.

Parameters

{ [-fields <fieldname>,…]: If you specify the -fields <fieldname>, … parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }: If you specify the -instance parameter, the command displays detailed information about all fields.
[-vserver <vserver name>] - Vserver: If this parameter is specified, the command displays the restricted-group information that is defeined in Domain Controller for the specified Vserver.
[-index <integer>] - Index: If this parameter is specified, the command displays the specified index for the group policy in the restricted group. The restricted-group information for the group policy at the specified index.
[-group-name <text>] - Group Name: If this parameter is specified, the command displays the restricted-group information for the specified group name.
[-group-policy-name <text>] - Group Policy Name: If this parameter is specified, the command displays the restricted-group information for the specified group policy name.
[-uuid <UUID>] - UUID: If this parameter is specified, the command displays the restricted-group information for the specified UUID of the group policy.
[-version <integer>] - Version: If this parameter is specified, the command displays the restricted-group information for the specified version of the group policy.
[-link <gpo-link>] - Link Type: If this parameter is specified, the command displays the restricted-group information for the specified link for the group policy.
[-members <gpoUserGroup>,…] - Members, List of Users/groups: If this parameter is specified, the command displays the restricted-group information for the specified members of users and groups.
[-member-of <gpoUserGroup>,…] - MemberOf, List of Groups: If this parameter is specified, the command displays the restricted-group information for the specified member of the group.

Examples

The following example displays information about all restricted groups that are defined in Domain Controller for a Vserver.

cluster1::> vserver cifs group-policy restricted-group show-defined

Vserver: vs_1
-------------

     Group Policy Name: gpo1
               Version: 16
                  Link: OrganizationalUnit
            Group Name: grp1
               Members: usr1
              MemberOf: GPO\g9
Group Policy Name: Resultant Set of Policy
               Version: 0
                  Link: RSOP
            Group Name: grp1
               Members: usr1
              MemberOf: GPO\g9