• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 274
  • Last Modified:

NAS access when AD is down

Dear Experts,

We have a small regional office which has a local server which is a DC and a File server. It is time for a refresh and we are considering removing the server completely and replacing it with a NAS unit with in-built DFS replication functionality. AD authentication will then be provided by our DCs at the main office.

My question is if the WAN link were to go down would users still be able to access files and folders on the NAS if there's no authentication to AD?
0
Bladey001
Asked:
Bladey001
3 Solutions
 
Alex Green3rd Line Server SupportCommented:
Yes it'll be fine, if the user logs on it'll have their groups cached. If there is a hardware limitation I'm not sure.

I've got a NAS box on a remote site and it's not an issue if the link goes down.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
That depend on how they will be accessing data. If over standard share, yes it will work fine up to 10 hrs (kerberos ticet validity period). When over DFS then probably not, because DFS relies on Global Catalog (port 3268) which is part of Domain Controller but if NAS has only DFS replication functionality then access to data would be possible. Only data replication would not be supported.

Regards,
Krzysztof
0
 
MaheshArchitectCommented:
Not sure if you could enable offline folder facility on NAS storage

if it possible, you can enable offline shared folders on client computers where local DC is not available and link is down

Mahesh
0
 
Bladey001Author Commented:
Can't really test at the moment because this is a hypothetical scenario. So will take on board all comments made.
0

Featured Post

Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now