Configuring Microsoft Windows Shared

Size: px

Start display at page:

Download "Configuring Microsoft Windows Shared"

Cecilia Barnett
5 years ago
Views:

2 Notices This user manual provides detailed instructions of using the QNAP Enterprise Storage NAS. Please read carefully and start to enjoy the powerful functions of the Enterprise Storage NAS. The QNAP Enterprise Storage NAS is hereafter referred to as the ES NAS or the NAS. This manual provides the description of all the functions of the ES NAS. The product you purchased may not support certain functions dedicated to specific models. Legal Notices All the features, functionality, and other product specifications are subject to change without prior notice or obligation. Information contained herein is subject to change without notice. QNAP and the QNAP logo are trademarks of QNAP Systems, Inc. All other brands and product names referred to are trademarks of their respective holders. Further, the or symbols are not used in the text. Disclaimer Information in this document is provided in connection with QNAP products. No license, express or implied, by estoppels or otherwise, to any intellectual property rights is granted by this document. Except as provided in QNAP's terms and conditions of sale for such products, QNAP Assumes no liability whatsoever, and QNAP disclaims any express or implied warranty, relating to sale and/or use of QNAP products including liability or warranties relating to fitness for a particular purpose, merchantability, or infringement of any patent, copyright or other intellectual property right QNAP Systems, Inc. All Rights Reserved. 2

3 Table of Contents Overview... 4 Infrastructure Diagram... 4 Network Settings Table... 5 Add NAS into the Server s domain... 6 Create Sub-folder... 8 Add Groups and Users into the Domain... 9 Assign Root Permission to All Users Disable Permission Inheritance and Assign Permission to Each Folder Verify Permissions QNAP Systems, Inc. All Rights Reserved. 3

Overview Samba is a function built into the QNAP QES operating system. Users can use Window's SMB/CIFS protocol to connect, mount, and use a file-level shared folder on an ES NAS.

4 Overview Samba is a function built into the QNAP QES operating system. Users can use Window's SMB/CIFS protocol to connect, mount, and use a file-level shared folder on an ES NAS. This document explains the process of joining an ES NAS to Microsoft Active Directory (AD), and assigning permissions to shared folders. For information on creating a shared folder in QES, refer to "Network and Storage Settings of ES NAS High-Availability Network Storage Services" instead. Infrastructure Diagram 2018 QNAP Systems, Inc. All Rights Reserved. 4

5 Network Settings Table Server Network Settings Role IP Description Windows Server Windows Server 2016 (1GbE) Data Network A Data port 1 in Windows Server (10GbE) Data Network A Data port 2 in Windows Server (10GbE) NAS Network Settings Role IP Description Management Management port 1 in NAS SCA (1GbE) Network (SCA) Data Network Data port 1 in NAS SCA (10GbE) (SCA1) Data Network Data port 2 in NAS SCA (10GbE) (SCA2) Management Management port 1 in NAS SCA (1GbE) Network (SCB) Data Network Data port 1 in NAS SCB (10GbE) (SCB1) Data Network Data port 2 in NAS SCB (10GbE) (SCB2) Shared Folder (Permissiondemo) Shared Folder in NAS SCA Pool1 Shared Path: \\ \Permissiondemo 2018 QNAP Systems, Inc. All Rights Reserved. 5

6 Adding the NAS to the domain Step 1: Click "Domain Security" on the QES Desktop. Step 2: Select "Active Directory authentication (Domain member)" > "Quick Configuration Wizard" QNAP Systems, Inc. All Rights Reserved. 6

7 Step 3: Enter domain information, then click "Next". Step 4: Specify the domain administrator username and password, then click "Next". Step 5: Click "Join". The NAS joins the domain QNAP Systems, Inc. All Rights Reserved. 7

8 Step 6: Click "Finish". Creating Sub-folders Step 1: Open File Explorer in Windows. Step 2: Enter the path to the shared folder. Step 3: Create subfolders for groups and users in the shared folder QNAP Systems, Inc. All Rights Reserved. 8

9 Adding Groups and Users into the Domain Step 1: Open "Active Directory Users and Computers" on the Active Directory Domain Controller. Step 2: Step 3: Select "Users" from the left panel. Right-click in the main panel to create a new group QNAP Systems, Inc. All Rights Reserved. 9

Step 4: Enter the group name, then click "OK".

Step 9: Right-click the group you created,

14 Step 11: Enter the username you created, then click "Check Names". The user account is selected. Step 12: Click "OK". Step 13: Repeat this process to add other users to group, then click "Apply" QNAP Systems, Inc. All Rights Reserved. 14

Step 14: Go to the "Member Of" tab, then

Step 15: Enter "Domain Users", then click

Step 16: Click "OK". Step 17: Repeat Steps 14-16 to configure other groups, then click "Apply".

16 Step 16: Click "OK". Step 17: Repeat Steps to configure other groups, then click "Apply". Assigning Root Permission to All Users By default, an ES NAS only allows administrators to have root permissions. This section will demonstrate how to assign root permissions to all users QNAP Systems, Inc. All Rights Reserved. 16

Step 1: In QES, go to "Storage Manager" >

18 Step 3: Click "Add". Step 4: Step 5: Select "Domain Groups" from the menu. Select the "RW" checkbox for "domain admin" and "domain users", then click "Add" QNAP Systems, Inc. All Rights Reserved. 18

Step 6: Confirm the permission settings, then click

Disabling Permission Inheritance and Assigning Permissions to Each Folder To configure and assign permissions for each folder individually, you must disable inheritance of the root

20 Disabling Permission Inheritance and Assigning Permissions to Each Folder To configure and assign permissions for each folder individually, you must disable inheritance of the root folder permissions. Step 1: In Windows, right-click the subfolder, then select "Properties". Step 2: Go to "Security" tab, then click "Advanced" QNAP Systems, Inc. All Rights Reserved. 20

Step 3: Go to "Permissions" tab, then click "Disable inheritance".

Step 5: Remove all permission entries except

25 Step 10: Click "OK". Step 11: Select group, then assign permissions using the check boxes. Allowing "Full Control" is not recommended. Any user with this permission will be able to remove folders directly. Step 12: Click "Apply" QNAP Systems, Inc. All Rights Reserved. 25

Step 13: Repeat steps 8 12 for "Domain Admins". Assign the group "Full control" permissions. Step 14: Repeat steps 1 13 to disable inheritance and assign permission for each folder and subfolder.

26 Step 13: Repeat steps 8 12 for "Domain Admins". Assign the group "Full control" permissions. Step 14: Repeat steps 1 13 to disable inheritance and assign permission for each folder and subfolder. Verifying Permissions Step 1: Log into the Windows Server as an administrator. Step 2: Step 3: Access the Server Manager console. Select "Local Servers" from the left panel, then click the hyperlinked value for the "Remote Desktop" property. The "System Properties" window opens QNAP Systems, Inc. All Rights Reserved. 26

Step 4: Step 5: Go to the "Remote" tab. Click "Select Users".

28 Step 7: Enter the created username, then click "Check Names". The user account is selected. Step 8: Click "OK". The account is added to the remote connection list QNAP Systems, Inc. All Rights Reserved. 28

31 The RD group folder does not appear in Windows File Explorer. FAE-Leader only has permission to access the FAE group. Inside the FAE group folder, FAE-Clark is not visible because FAE-Leader doesn't have permission to view the folder QNAP Systems, Inc. All Rights Reserved. 31

Setting up the DR Series System on Acronis Backup & Recovery v11.5. Technical White Paper

Setting up the DR Series System on Acronis Backup & Recovery v11.5 Technical White Paper Quest Engineering November 2017 2017 Quest Software Inc. ALL RIGHTS RESERVED. THIS WHITE PAPER IS FOR INFORMATIONAL