Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Network File System (NFS) provides a file sharing solution that lets you transfer files between computers running Windows Server and UNIX operating systems by using the NFS protocol. This article describes the steps you should follow to install NFS and create your first NFS share.
NFS authentication
NFS Server for Windows Server supports multiple authentication methods, including Kerberos and AUTH_SYS. The authentication method you choose depends on your organization's security requirements and the NFS version you're using. Consider which authentication method is best for your environment before creating an NFS file share.
For the NFS version 4.1 and NFS version 3.0 protocols, we recommend that you use Kerberos (RPCSEC_GSS). There are three options with increasing levels of security protection:
Krb5: Uses the Kerberos version 5 protocol to authenticate users before granting them access to the file share.
Krb5i: Uses the Kerberos version 5 protocol to authenticate with integrity checking (checksums), which verifies that the data isn't altered.
Krb5p: Uses the Kerberos version 5 protocol, which authenticates NFS traffic with encryption for privacy. This option is the most secure Kerberos option.
Note
You can also choose not to use the preceding Kerberos authentication methods and instead enable unmapped user access through AUTH_SYS. We strongly discourage using this option as it removes all authentication protections and allows any user with access to the NFS server to access data. When you use unmapped user access, you can specify to allow unmapped user access by UID or GID, which is the default. You can also allow anonymous access.
Prerequisites
To deploy NFS, ensure that you have the following prerequisites:
One or more computers running Windows Server on which you install the two main Services for NFS components: Server for NFS and Client for NFS. You can install these components on the same computer or on different computers.
If you're using a UNIX-based computer for your NFS server or client, it must be compatible with one of the following NFS protocol specifications:
Install Network File System
To install the Network File System role as a standalone server, perform the following steps:
Here's how to install the DNS Server role using Server Manager from the Windows desktop.
From the Windows desktop, open the Start menu, then select the Server Manager tile.
On the menu, go to Manage, and then select Add Roles and Features.
On the Before you begin page, select Next to begin.
On the Select installation type page, select the Role-based or feature-based installation option, and select Next.
On the Select destination server page, leave the default options. Select Next.
On the Select server roles page, expand File and Storage Services > File and iSCSI Services, check File Server, File Server Resource Manager, and Server for NFS, then Next.
- You're prompted to add features that are required for Server for NFS, if you're happy with the defaults, select Add Features.
On the Select features page, you can leave the default selections, and then select on the Next button.
On the DNS Server page, review the role description and things to note, select Next to continue.
On the Confirm installation selections page, review the selected roles and features, and then select on the Install button to begin the installation process.
Once the installation is complete, select Close. The installation doesn't require a reboot.
Create an NFS file share
To create an NFS file share, perform the following steps.
Tip
NFS version 4.1 allows file names to be created or copied with illegal characters. If you attempt to open the files with vi editor, it shows the files as being corrupt. You can't save the file from vi, rename, move it, or change permissions. Avoid using illegal characters.
Here's how to create an NFS file share using Server Manager from the Windows desktop.
Sign in to the server as a member of the local Administrators group.
Server Manager starts automatically.
- If the tool doesn't automatically start, select Start. Enter servermanager.exe, and then select Server Manager.
On the left, select File and Storage Services, then select Shares.
Under the Shares column, in the Tasks drop down menu, select New Share.
On the Select Profile page, select either NFS Share - Quick or NFS Share - Advanced, then select Next.
On the Share Location page, select a server and a volume, then select Next.
On the Share Name page, enter a name for the new share. Confirm the share path and remote path, then select Next.
On the Authentication page, specify the authentication method you want to use, then select Next. Share authentication methods are discussed in the NFS authentication section.
On the Share Permissions page, select Add. The Add Permissions dialog opens.
Choose the level of user permissions to grant: Host, Netgroup, Client group, or All Machines.
Use the drop-down menu to select the preferred Language encoding.
Use the drop-down menu to select the preferred Share permissions.
Select Add, then select Next.
On the Permissions page, configure access control for your selected users. When you're ready, select Next.
On the Confirmation page, review your configuration, and select Create to create the NFS file share.