Synology NAS Directory Server

See also Synology DiskStation Applications

Home: https://www.synology.com/en-us/

Forum: https://community.synology.com/enu

Help: https://help.synology.com/dsm/

Download Add ons https://www.synology.com/en-us/support/download/DS214+

YouTube Channel: https://www.youtube.com/user/synologyinc/videos

Blog: https://blog.synology.com

CLI Admin Guide: https://global.download.synology.com/download/Document/Software/DeveloperGuide/Firmware/DSM/All/enu/Synology_DiskStation_Administration_CLI_Guide.pdf

DSM 7.2 User Guide: https://global.synologydownload.com/download/Document/Software/UserGuide/Os/DSM/7.2/enu/Syno_UsersGuide_NAServer_7_2_enu.pdf

Synology KnowledgeBase: https://kb.synology.com

Users created for DSM login are NOT included in the directory.

Directory Server requires the NAS to be a DNS server that will be installed with Directory Server Services. If there is already a DNS server on your network it will be setup as a forwarding DNS.

Directory Server Quick Start Guide: https://kb.synology.com/en-us/DSM/tutorial/Quick_Start_with_Directory_Server

RSAT must be installed on a domain joined Windows Computer.

Install RSAT: https://kb.synology.com/en-us/DSM/tutorial/How_to_install_RSAT_to_set_up_group_policies_for_Synology_Directory_Server

Enable user home directories: https://kb.synology.com/vi-vn/DSM/tutorial/user_enable_home_service

Synology terminology combines roaming and redirected folders so this howto does both.

Disabling Ownership checking on profile folders does not appear to be possible.

Roaming Profiles: https://kb.synology.com/en-global/DSM/tutorial/How_to_Assign_a_Home_Directory_to_Synology_Directory_Server_Users

Map a drive: https://kb.synology.com/en-ro/DSM/tutorial/How_to_mount_a_network_drive_for_Synology_Directory_Server_users

This can be done on the NAS via group policy.

If using RSAT to modify/create a user password it has been reported that the “Change at next login” option does not work. Must be set on the NAS.

Set password policy on NAS: Main Menu → Synology Directory Server → Domain Policy

Added Security: https://kb.synology.com/en-us/DSM/tutorial/How_to_add_extra_security_to_your_Synology_NAS

This will apply to only Synology DSM users, not Directory Server users.

2FA cannot be setup on a DIY Synology NAS because online Synology resources are used.

Some packages do not support 2FA: https://kb.synology.com/en-af/DSM/tutorial/OTP_packages_supportability

2FA setup: https://kb.synology.com/en-af/DSM/help/DSM/SecureSignIn/2factor_authentication?version=7#b_15

To get to “Personal”

• Login to the Synology NAS via a web browser.
• Click the “User icon” upper right.
• Select “Personal”

Take snapshots of shared drives: https://kb.synology.com/en-ro/DSM/tutorial/Quick_Start_Snapshot_Replication