====== Synology NAS Directory Server ======

See also **[[computing:storage:synology_diskstation_apps|Synology DiskStation Applications]]**

**Home**: https://www.synology.com/en-us/

**Forum**: https://community.synology.com/enu

**Help**: https://help.synology.com/dsm/

**Download Add ons** https://www.synology.com/en-us/support/download/DS214+

**YouTube Channel**: https://www.youtube.com/user/synologyinc/videos

**Blog**: https://blog.synology.com

**CLI Admin Guide**: https://global.download.synology.com/download/Document/Software/DeveloperGuide/Firmware/DSM/All/enu/Synology_DiskStation_Administration_CLI_Guide.pdf

**DSM 7.2 User Guide**: https://global.synologydownload.com/download/Document/Software/UserGuide/Os/DSM/7.2/enu/Syno_UsersGuide_NAServer_7_2_enu.pdf

**Synology KnowledgeBase**: https://kb.synology.com

===== Install Directory Server Services =====

:!: Users created for DSM login are NOT included in the directory.

:!: Directory Server requires the NAS to be a DNS server that will be installed with Directory Server Services.  If there is already a DNS server on your network it will be setup as a forwarding DNS.

**Directory Server Quick Start Guide**: https://kb.synology.com/en-us/DSM/tutorial/Quick_Start_with_Directory_Server

===== Install RSAT for Group Policy Management =====

:!: RSAT must be installed on a domain joined Windows Computer.

**Install RSAT**: https://kb.synology.com/en-us/DSM/tutorial/How_to_install_RSAT_to_set_up_group_policies_for_Synology_Directory_Server

===== Home Directories =====

**Enable user home directories**: https://kb.synology.com/vi-vn/DSM/tutorial/user_enable_home_service

===== Enable Roaming Profiles for users =====

:!: Synology terminology combines roaming and redirected folders so this howto does both.

:!: Disabling Ownership checking on profile folders does not appear to be possible.
 
**Roaming Profiles**: https://kb.synology.com/en-global/DSM/tutorial/How_to_Assign_a_Home_Directory_to_Synology_Directory_Server_Users

===== Map drives via Group Policy =====

**Map a drive**: https://kb.synology.com/en-ro/DSM/tutorial/How_to_mount_a_network_drive_for_Synology_Directory_Server_users

===== Set password policy =====

:!: This can be done on the NAS via group policy.

:!: If using RSAT to modify/create a user password it has been reported that the "Change at next login" option does not work.  Must be set on the NAS.

**Set password policy on NAS**: Main Menu -> Synology Directory Server -> Domain Policy

===== How to add Enhanced Security =====

**Added Security**: https://kb.synology.com/en-us/DSM/tutorial/How_to_add_extra_security_to_your_Synology_NAS

===== Enable DSM login 2FA =====

:!: This will apply to only Synology DSM users, not Directory Server users.

:!: 2FA cannot be setup on a DIY Synology NAS because online Synology resources are used.

**Some packages do not support 2FA**: https://kb.synology.com/en-af/DSM/tutorial/OTP_packages_supportability

**2FA setup**: https://kb.synology.com/en-af/DSM/help/DSM/SecureSignIn/2factor_authentication?version=7#b_15

**To get to "Personal"**
  * Login to the Synology NAS via a web browser.
  * Click the "User icon" upper right.
  * Select "Personal"

===== Snapshots =====

**Take snapshots of shared drives**: https://kb.synology.com/en-ro/DSM/tutorial/Quick_Start_Snapshot_Replication