For a standard pair, Dynamic File Services automatically synchronizes the attributes and ACL (access control list) permissions on files and folders that it moves, whether the move is triggered by a policy or by a user that accesses the data via the merged view.
After creating a standard pair, ensure that you use the merged view of the pair’s file tree when modifying the attributes and ACL permissions on files and folders in the pair. To make changes, access the pair via the network share on the primary path, then modify the settings.
Files: When a file’s ACLs are modified via the merged view, DynamicFS sets the permissions for the file on the primary path or secondary path, depending on where the file is currently stored.
Folders: When a folder’s attributes or ACLs are modified via the merged view, DynamicFS sets the permissions for a folder on both the primary and secondary paths, because folders have an instance in both locations.
To add user name entries to a folder’s ACL list, you must make the changes directly for the instance of the folder on the primary path. Windows does not allow user names to be added to the ACL list when you are working in the merged view. DynamicFS monitors for security changes on the primary path and automatically synchronizes the ACL settings on the instance of the folder on the secondary path.
WARNING:Modifying the attributes and ACLs on folders when you are working outside of a merged view can cause conflicts for these values between the two folder instances on the primary path and secondary path.
To identify conflicts caused by mismatched attributes or ACL settings on a folder, you can run the DynamicFS Pair Check utility (DswPairCheck.exe) to manually detect and report the attribute and ACL differences between the two instances of the folder. For information, see Section 8.11, Reporting Conflicts for Attributes and ACL Permissions on Folders.