I'd say a series of Active Directory Synology videos could be very helpful for users. I truly think some people don't fully realize the power that Synology builds around DSM, and it's Package Center. I'm glad your shining light on it.
I would also like the active directory video. Only a few of them on TH-cam, and most aren’t that great....too dry, often a foreign accent or language that makes it hard to understand what they’re teaching. It’s another niche you can fill that TH-cam lacks. You’re doing great at finding them!
Please go into more detail with this for a small business. Would be interesting to learn about roaming profiles/small details/etc and how they work with the Synology implementation. Thanks for all the great videos
Great video - would love to see how adding computers to the domain works and having them managed by the Synology. Do logon scripts work? Is there any group policy stuff? More AD video content would be great. This would be a great single solution to replace my ProxMox FreeNAS setup.
I'm using ADS quite successfully in a small business, GPO's work without any issues, logon scripts enforced by group policy works (just like a Windows based domain controller), adding computers/laptops/servers (including Windows 2016, Windows 10) works just like a normal domain controller. Just use MMC and add all your 'management' based tooling on your workstation to fully manage your domain. Setting up home drives with profiles is a breeze. So far I'm very impressed, saving an extra server (license) by using ADS on Synology.
Awesome tutorial of Active Directory on Synology. I would really like to see even more on this topic as you mentioned Willie. You're doing an outstanding work!
Great video! I would also like to see more synology ad server. A few examples with drive mapping and logon scripts ?? And maybe tips to apply rules / scripts to multiple users at once. Keep up the great videos
Can i sync Synology AD with a real MS AD server? SO i do not have to manually add users. Were are to get rid of our MS ad server as per management. Thanks...
Fantastic tutorial. Thank you very much for sharing. I am in the process of studying the replacement of Windows servers with a Nas as a Server solution. Synology seems a very good candidate for the task.
There has been an update to Windows 10 that makes adding the AD mgmt tool so you can actually really manange AD. There is little interface in DSM for creating GP objects, login scripts etc.
Finally, I think I am getting a glimmer of what's happening, a very good video, I wonder if you can elaborate more and if possible, to enlighten us on LDAP, Active Directory C2 identity, are they all required if our synology is to turn into a complex sort of server. Thank You
We have a small family business that would certainly benefit from active directory, I’m tech savy but still a networking newbie so I would love more in depth knowledge on AD please, specifically being able to log onto a computer via AD
I would love to see, the steps of replacing a local AD running windows server, with a DSM based AD. How to dcpromo the DSM box into the domain. This would allow the shutting down of the original AD
Could it bee an idea to go the extra step and make a video on using Azure ad as your ad and just have the synology as local storage (but Azure ad joined) for permissions. In my region we are close to 19 of 20 that are in office with the mail anyway
Is this the best and simplest way to manage say 10 users without using the regular Synology user accounts? Really dont need all the domain stuff. Thanks! Great video!
Hi there. Great video. Tried to add two new workstations to the domain that was set up on Synology. Each time I do so, the machines cannot find the domain in windows. Where should I look in Synology to resolve this nagging issue? Appreciate your time.
Thanks for showing this. How would you set up a 2nd device and "dcpromo" it if you wanted to have a secondary Domain Controller as a backup? Also, check out uBlock Origin instead of AdBlock Plus :)
I have a small business network I am supporting that currently has 17 computers all running Windows Pro and running as a workgroup to share files from mainly two computer. Shareable files used by employees are Word, Excel, and quickbooks. Multiple levels of file permissions does not exist and it becomes cumbersome when there is employee turnover and people sharing passwords to get on certain machines. A Windows server seems overkill and is expensive so I'm wondering if a Synology NAS would support: - Active Directory so logins can be done with domain joining for better control. - Folder permissions to have control access better. - Mapped drives for easier access to data on the NAS and other sharable locations - Print management of networked printers (7 of them) so they are mapped/installed if I need to create a new user. I was also considering Microsoft 365 with Azure AD as an option but that seems limited too because it does not support these four items and would cost much more than a Windows server after ~1.5 years. Any advice if a Synology NAS supports this would be much appreciated. Do you also recommend a certain Synology model? Thanks!
Very informative, but you should have explained why someone would choose Active Directory over the basic file-sharing services available with the NAS natively.
AD without a DMZ? If possible, you might be able to use the Synology Router in a DMZ and then trust it with an internal (read different domain name) domain AD controller or is that also considered insecure these days?
Great video - Thanks Willie. Quick questions regarding AD on Synology - are you required to buy Windows CALs for the systems that are being joined to the domain?
I guess it wouldn't be "Windows" CALs but still a great question. Do we need to purchase any kind of additional licenses for the computers we might connect in this way?
Do computers have to be added to active directory in advanced or can they just join the domain similar to a regular Microsoft Directory server and then it would create the OU for the workstation?
Just in case, like me, people are watching this now, the process is very similar but the option is now called Synology Directory Server. Guessing Active Directory may not have been allowed to be used long term :)
This is very informative, thanks a lot!! would appreciate some info on how to do additional stuff like GPOs on blocking resources like USB ports on group members, thank you very much!!!
Thanks I have a client where this would be useful. They are always swapping computers and changing usernames and passwords and it breaks their connection to the Synology file server..
Dear Willie Howe, I have purchased a new DS1520+ Synology NAS. but i am confused that should I install LDAP Server or Synology Directory Server? for user management, folder permission access and Space quota allocation. which one is better? I need yore Guide please.... And Last but not least, Is Synology Directory Server (Business / Utility) a paid version or free?
@@WillieHowe Hi, Now i am facing another problem. As you know I have Synology NAS DS1520+. I am using "Synology Directory Server" and I created users, groups and Organization Units in the Synology Directory Server, But I am unable to set folder permissions because some times groups and non of the Time Organization Unit are being shown under the permission tab of Shared folder in control panel. Let me tell you that I have already created Users, Groups and OUs.
Hello Anyone--I'm a relatively new NAS user. As of 4/6/2020 I don't see an Active Directory Server in Synology's Package Center, at least not for the ds418play. Has it been removed? Renamed?
@@WillieHowe Wow, fast reply! Thank you-- But I still don't see it even searching for Synology Directory Server. There is, however, an "LDAP Server". Is that the same? I sheepishly ask these questions because I was very much involved in networking from the early 80s through 2000. I've forgot so much, and there was much new coming on the scene as I got more specialized into lower level development and testing.
@@WillieHowe How odd-- This NAS is only about a month or less old, and I believe I have everything up to date. I'll ping their support and see what I'm doing wrong. Thank you for your quick reply, and for your super videos. Very well done--succinct, packed with information videos, not a lot of fluff, right to the point--but not so techie-snobby that a newbie (or an oldie that has forgotten a lot) can't follow along. I like it.
@@WillieHowe Oh no! I think you've solved it. If I'm reading this right, these are the only models that are supported, and DS418play is not on the list :( Applied Models 20 series: FS6400, FS3400, RS820RP+, RS820+, DS620slim, SA3600, SA3400, SA3200D19 series: RS1619xs+, RS1219+, DS2419+, DS1819+, DS1019+, DVA321918 series: FS1018, RS3618xs, RS2818RP+, RS2418RP+, RS2418+, RS818RP+, RS818+, DS3018xs, DS1618+, DS918+, DS718+, DS218+17 series: FS3017, FS2017, RS18017xs+, RS4017xs+, RS3617xs+, RS3617RPxs, RS3617xs, DS3617xs, DS1817+, DS1517+16 series: RS18016xs+, RS2416RP+, RS2416+, DS916+, DS716+, DS716+II, DS216+, DS216+II15 series: RS815RP+, RS815+, RC18015xs+, DS3615xs, DS2415+, DS1815+, DS1515+, DS415+14 series: RS3614xs+, RS3614RPxs, RS3614xs, RS2414RP+, RS2414+, RS814RP+, RS814+13 series: RS10613xs+, RS3413xs+, DS2413+, DS1813+, DS1513+, DS713+12 series: RS3412RPxs, RS3412xs, RS2212RP+, RS2212+, RS812RP+, RS812+, DS3612xs, DS1812+, DS1512+, DS712+, DS412+11 series: RS3411RPxs, RS3411xs, RS2211RP+, RS2211+, DS3611xs, DS2411+, DS1511+, DS411+, DS411+II I'm not sure what the breakdown is just looking at it that way, but maybe the systems it works on or not home/personal boxes. But with 5 computers and 7 homeschooled kids, I'd love to be able to manage users that way :-/
I love how when saying dont mess with these active directory records on a synology nas DCif say your watching this as a new field tech basically learning onsite as your sent to jobs please dont do this to yourself. Exact same way I try to explain to friends that learning for field "Ok these VM's are literally made for you to learn and destroy dont be afriad but alaso dont act like this on job or your own pc:) " man its great video. What do you think of Datto, synology was big new technology when came out. now i see good in datto as well -Nicholas Kiefer
I'm in the same boat.... Only way you can do this is what a virtual machine on the synology. Quickbooks requires their own database run on a windows machine. Not going to get around that.
Yes please to more AD video content!
More active directory videos would be of great value. Excellent video
I'd say a series of Active Directory Synology videos could be very helpful for users.
I truly think some people don't fully realize the power that Synology builds around DSM, and it's Package Center. I'm glad your shining light on it.
I would also like the active directory video. Only a few of them on TH-cam, and most aren’t that great....too dry, often a foreign accent or language that makes it hard to understand what they’re teaching. It’s another niche you can fill that TH-cam lacks. You’re doing great at finding them!
Please go into more detail with this for a small business. Would be interesting to learn about roaming profiles/small details/etc and how they work with the Synology implementation. Thanks for all the great videos
Great video - would love to see how adding computers to the domain works and having them managed by the Synology. Do logon scripts work? Is there any group policy stuff? More AD video content would be great. This would be a great single solution to replace my ProxMox FreeNAS setup.
I'm using ADS quite successfully in a small business, GPO's work without any issues, logon scripts enforced by group policy works (just like a Windows based domain controller), adding computers/laptops/servers (including Windows 2016, Windows 10) works just like a normal domain controller. Just use MMC and add all your 'management' based tooling on your workstation to fully manage your domain. Setting up home drives with profiles is a breeze. So far I'm very impressed, saving an extra server (license) by using ADS on Synology.
Awesome tutorial of Active Directory on Synology. I would really like to see even more on this topic as you mentioned Willie. You're doing an outstanding work!
Great video!
I would also like to see more synology ad server.
A few examples with drive mapping and logon scripts ??
And maybe tips to apply rules / scripts to multiple users at once.
Keep up the great videos
Thanks Willie! I'm interested on how well this works with RSAT.
Can i sync Synology AD with a real MS AD server? SO i do not have to manually add users. Were are to get rid of our MS ad server as per management. Thanks...
Fantastic tutorial. Thank you very much for sharing. I am in the process of studying the replacement of Windows servers with a Nas as a Server solution. Synology seems a very good candidate for the task.
Is there a way to add a synology to an existing domain, to give a remote office a domain controller, without the need for a full windows server?
There has been an update to Windows 10 that makes adding the AD mgmt tool so you can actually really manange AD. There is little interface in DSM for creating GP objects, login scripts etc.
Finally, I think I am getting a glimmer of what's happening, a very good video, I wonder if you can elaborate more and if possible, to enlighten us on LDAP, Active Directory C2 identity, are they all required if our synology is to turn into a complex sort of server. Thank You
We have a small family business that would certainly benefit from active directory, I’m tech savy but still a networking newbie so I would love more in depth knowledge on AD please, specifically being able to log onto a computer via AD
Great video - can you import batch groups of users - like 100 to 200 at a time?
I would love to see, the steps of replacing a local AD running windows server, with a DSM based AD. How to dcpromo the DSM box into the domain. This would allow the shutting down of the original AD
May I Know what are the advantage of using the AD over just using the Synology features ?
Could it bee an idea to go the extra step and make a video on using Azure ad as your ad and just have the synology as local storage (but Azure ad joined) for permissions. In my region we are close to 19 of 20 that are in office with the mail anyway
Is this the best and simplest way to manage say 10 users without using the regular Synology user accounts? Really dont need all the domain stuff. Thanks! Great video!
Hi there. Great video. Tried to add two new workstations to the domain that was set up on Synology. Each time I do so, the machines cannot find the domain in windows. Where should I look in Synology to resolve this nagging issue? Appreciate your time.
More AD videos would be appreciated!
Oh my goodness yes active directory Great information would love to see some roaming profile stuff & goodies thank U
On my DSM, the domain group I've created do no show up on share folder permissions for domain groups. Any idea why?
This is now called Synology Directory Server. Its in BETA, however its the same as the Active Directory Server he spoke about.
Yes, there's a beta version but there's a stable release version that's been out for a long time. Thanks for the comment.
More AD vids please because of the importance of the subject.
Thanks for showing this. How would you set up a 2nd device and "dcpromo" it if you wanted to have a secondary Domain Controller as a backup?
Also, check out uBlock Origin instead of AdBlock Plus :)
I would love if you could make a more detailed video about Active Directory.
Hey Willie did you ever do a video on roaming profiles ?
I have a small business network I am supporting that currently has 17 computers all running Windows Pro and running as a workgroup to share files from mainly two computer. Shareable files used by employees are Word, Excel, and quickbooks. Multiple levels of file permissions does not exist and it becomes cumbersome when there is employee turnover and people sharing passwords to get on certain machines.
A Windows server seems overkill and is expensive so I'm wondering if a Synology NAS would support:
- Active Directory so logins can be done with domain joining for better control.
- Folder permissions to have control access better.
- Mapped drives for easier access to data on the NAS and other sharable locations
- Print management of networked printers (7 of them) so they are mapped/installed if I need to create a new user.
I was also considering Microsoft 365 with Azure AD as an option but that seems limited too because it does not support these four items and would cost much more than a Windows server after ~1.5 years.
Any advice if a Synology NAS supports this would be much appreciated. Do you also recommend a certain Synology model?
Thanks!
@@WillieHowe So I should be able to do all of these with a Synology NAS and their software?
@willie how will you approach it to replace an existing active directory on a windows server 2003 with this appliance/app instead?
Interesting - but to many questions left unanswered, e.g. what the hell IS Active Directory ands what does it do for me?
Excellent Video as always Willie. Thanks
Thanks! Was just looking at replacing a tower server with a Synology. Also interested in the Active Directory video
Very informative, but you should have explained why someone would choose Active Directory over the basic file-sharing services available with the NAS natively.
AD without a DMZ? If possible, you might be able to use the Synology Router in a DMZ and then trust it with an internal (read different domain name) domain AD controller or is that also considered insecure these days?
Wille have you try removing machine from Synology Domain? It appears that is not possible after you join.
Can we migrate existing ad to this synology?
kalo sukses share ya mas migrasi dari MS AD ke Synology AD ;-)
Somehow does not send email to newly created users to let them login :( Can you explain how do we add our computers to our domain exactly :(
Great video - Thanks Willie. Quick questions regarding AD on Synology - are you required to buy Windows CALs for the systems that are being joined to the domain?
I guess it wouldn't be "Windows" CALs but still a great question. Do we need to purchase any kind of additional licenses for the computers we might connect in this way?
Is it possible to manage printing and deploy printers using Synology directory service?
Great vid. I am interested in the Ad video you mentioned to make if there is enough demand for it !
Can you talk more aboutSYNOLOGY RADIUS SERVER
Do computers have to be added to active directory in advanced or can they just join the domain similar to a regular Microsoft Directory server and then it would create the OU for the workstation?
How do you do this and have a Pi Hole running at the same time?
There is no possibility to set "Send expiration notification emails" for Synology AD users... Synology Directory Server don't have such option
Just in case, like me, people are watching this now, the process is very similar but the option is now called Synology Directory Server. Guessing Active Directory may not have been allowed to be used long term :)
Agreed more AD stuff would be amazing. Thanks!
Willie, What is the best way to get a unifi network setup to point to synology DNS?
6:30 can I add #7? there be dragons. Unless you want a retro internet experience with side of gremlins, stay out of that tab.
This is very informative, thanks a lot!! would appreciate some info on how to do additional stuff like GPOs on blocking resources like USB ports on group members, thank you very much!!!
Thank you for the video, can I use the NAS as a BDC? Do you have a video on that?
Can the Synology be a backup Active directory server?
I see you have DNS name different with Active Directory domain name. Can it be the same? Pro and Cons. Thanks
Are they using Samba as the back end of this or is it something else?
lol at the "package center" thumbnail photo at 7:00
Can you show how to import multiple Domain users ?
Interested into more detailed AD DSM as well
Thanks I have a client where this would be useful. They are always swapping computers and changing usernames and passwords and it breaks their connection to the Synology file server..
PLS! more AD stuff
@ Willie - What are you using for screen recording? I’ve needed a setup like your to do videos for my nonprofit team.
How do you add a linux computer to SAD
Well done video - it would be great if you could do another video on a beginner's guide to Active Directory.
How many domain users does the Synology Active Directory Server Setup support?
More active directory please!
Felipe MC lots think it's the same as AD as they both use LDAP and Kerberos
Hello!! I would very much like you to tell me if you know if you are registering a domain in wordpress through synology ds 218j. thank you very much
Great starter video, but..... we need more :D keep up the good work!
Hi Will, did you ever make the Active Directory video? I would love to see this.... Thanks for a great channel :-)
I would love to know more about AD.
Hello, please make Active directory explain video... Thank you
Is there a way of migrating from a M$ server, to the synology? My AD is running on a 2k3 server I'd love to toss in a dumpster
Hello. did you ever find out anything on this? i like to do the same to replace a few w2k3 servers
Would also like info on this. Replacing a 2012 R2 server.
Will it support LDAP with this configuration?
Another great video, More active directory videos please
In a setup as this one, would it be recommended to hand out DHCP reservations via the Synology or via the network router?
Thanks
@@WillieHowe thanks!
Can a secondary Synology DC be created within an existing domain?
@@WillieHowe thanks!!
P.S. your keyboard game is on point, what keyboard are you using :)
I'm olso want to see more of the Synology active directory
Great video Willie :)
Great video! Is it okay to run DNS server on the Synology NAS while running DNS on my EdgeRouter?
@@WillieHowe Thanks!
thank you for your sharing!!
Thanks for the great video! i was looking for an inexpensive AD solution - Yes more AD content please kind Sir
Dear
Willie Howe,
I have purchased a new DS1520+ Synology NAS. but i am confused that should I install LDAP Server or Synology Directory Server? for user management, folder permission access and Space quota allocation. which one is better? I need yore Guide please....
And Last but not least, Is Synology Directory Server (Business / Utility) a paid version or free?
@@WillieHowe Thanks budy..
@@WillieHowe Hi, Now i am facing another problem.
As you know I have Synology NAS DS1520+.
I am using "Synology Directory Server" and I created users, groups and Organization Units in the Synology Directory Server, But I am unable to set folder permissions because some times groups and non of the Time Organization Unit are being shown under the permission tab of Shared folder in control panel. Let me tell you that I have already created Users, Groups and OUs.
Hello Anyone--I'm a relatively new NAS user. As of 4/6/2020 I don't see an Active Directory Server in Synology's Package Center, at least not for the ds418play. Has it been removed? Renamed?
@@WillieHowe Wow, fast reply! Thank you-- But I still don't see it even searching for Synology Directory Server. There is, however, an "LDAP Server". Is that the same? I sheepishly ask these questions because I was very much involved in networking from the early 80s through 2000. I've forgot so much, and there was much new coming on the scene as I got more specialized into lower level development and testing.
@@WillieHowe How odd-- This NAS is only about a month or less old, and I believe I have everything up to date. I'll ping their support and see what I'm doing wrong. Thank you for your quick reply, and for your super videos. Very well done--succinct, packed with information videos, not a lot of fluff, right to the point--but not so techie-snobby that a newbie (or an oldie that has forgotten a lot) can't follow along. I like it.
@@WillieHowe Oh no! I think you've solved it. If I'm reading this right, these are the only models that are supported, and DS418play is not on the list :(
Applied Models
20 series: FS6400, FS3400, RS820RP+, RS820+, DS620slim, SA3600, SA3400, SA3200D19 series: RS1619xs+, RS1219+, DS2419+, DS1819+, DS1019+, DVA321918 series: FS1018, RS3618xs, RS2818RP+, RS2418RP+, RS2418+, RS818RP+, RS818+, DS3018xs, DS1618+, DS918+, DS718+, DS218+17 series: FS3017, FS2017, RS18017xs+, RS4017xs+, RS3617xs+, RS3617RPxs, RS3617xs, DS3617xs, DS1817+, DS1517+16 series: RS18016xs+, RS2416RP+, RS2416+, DS916+, DS716+, DS716+II, DS216+, DS216+II15 series: RS815RP+, RS815+, RC18015xs+, DS3615xs, DS2415+, DS1815+, DS1515+, DS415+14 series: RS3614xs+, RS3614RPxs, RS3614xs, RS2414RP+, RS2414+, RS814RP+, RS814+13 series: RS10613xs+, RS3413xs+, DS2413+, DS1813+, DS1513+, DS713+12 series: RS3412RPxs, RS3412xs, RS2212RP+, RS2212+, RS812RP+, RS812+, DS3612xs, DS1812+, DS1512+, DS712+, DS412+11 series: RS3411RPxs, RS3411xs, RS2211RP+, RS2211+, DS3611xs, DS2411+, DS1511+, DS411+, DS411+II
I'm not sure what the breakdown is just looking at it that way, but maybe the systems it works on or not home/personal boxes. But with 5 computers and 7 homeschooled kids, I'd love to be able to manage users that way :-/
Excellent and very informative video!
can yuo RSAT to synology?
I love how when saying dont mess with these active directory records on a synology nas DCif say your watching this as a new field tech basically learning onsite as your sent to jobs please dont do this to yourself. Exact same way I try to explain to friends that learning for field "Ok these VM's are literally made for you to learn and destroy dont be afriad but alaso dont act like this on job or your own pc:) " man its great video. What do you think of Datto, synology was big new technology when came out. now i see good in datto as well
-Nicholas Kiefer
Synology > Datto
This is gold bro..
Nice video!! All thumbs up.
Very good vidéo ! Thanks à lot. Please do one vidéo about rsat and gpo. Please.
good stuff man, thank you
thanks
Please a solution for quickbooks and synology! i keep buying servers just because of quickbooks hosting file
I'm in the same boat.... Only way you can do this is what a virtual machine on the synology. Quickbooks requires their own database run on a windows machine. Not going to get around that.
did you find any solution on this?
did you find any solution on this?
plz could you do more AD content? also, great video
Group policy please! Great content!
This is almost just like Microsoft's Small Business Server but without Exchange and SQL.
Great video. I need moar!
good content but too much clicking around......