NAS connected to Windows Domain:

NAS connected to Windows Domain:

We are considering connecting a QNAP NAS to a Windows Domain.  I have read the QNAP advice on how to achieve this but have some questions as to the practicality and security.

1.      Although the Windows Domain users are copied to the NAS, I wonder if an account can be setup on the NAS that would by-pass the domain security?
2.      Does access to data on the NAS require a separate login or, does the Windows login get passed through seamlessly?
Thanks
LVL 1
gerlisAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Iamthecreator OMIT Admin/EE Solution GuideCommented:
Does access to data on the NAS require a separate login or, does the Windows login get passed through seamlessly?
When you join the QNAP to the domain you can directly add the AD security groups to the network share permissions to control the access
Its a simple and straightforward process
Although the Windows Domain users are copied to the NAS, I wonder if an account can be setup on the NAS that would by-pass the domain security?
You can always access the QNAP with the built in admin account in the WebUI (separate from the AD account). You can create and manage other local NAS accounts.
McKnifeCommented:
If the NAS device is joined to the domain, it can use domain users for authentication and thus, it will be seamless.
I don't understand question 1. If you administer the NAS, why would you want accounts other than domain accounts? If you have a reason to use other accounts, where would be the problem, why is this a bypass of domain security? There is no "domain security".
gerlisAuthor Commented:
I was curious as to whether someone could bypass domain security - i.e get into folders they shouldn't be able to get into, by creating another account directly on the NAS.
Get a highly available system for cyber protection

The Acronis SDI Appliance is a new plug-n-play solution with pre-configured Acronis Software-Defined Infrastructure software that gives service providers and enterprises ready access to a fault-tolerant system, which combines universal storage and high-performance virtualization.

Iamthecreator OMIT Admin/EE Solution GuideCommented:
I was curious as to whether someone could bypass domain security - i.e get into folders they shouldn't be able to get into, by creating another account directly on the NAS

Yes you can access the folders with the local NAS accounts, if they have permissions to do so. These permissions are managed on the NAS.
McKnifeCommented:
Gerlis, it's still not clear at all.
 Folders have ACLs and if you create a local user at the NAS and you let that user access a folder on purpose, where's the bypass?
gerlisAuthor Commented:
Somehow i'm not being clear.  Is data on the NAS just as secure as it would be if stored on the server itself?
McKnifeCommented:
Now I understand. If we are looking at share security, yes, it's as secure. If you look at aspects like data in transit encryption, the answer might be different. Do you utilize smb encryption at your server?
gerlisAuthor Commented:
No SMB encryption.
McKnifeCommented:
Ok.

Just update your Nas regularly, only activate options that you use and keep it physically secured and you will be fine.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
gerlisAuthor Commented:
Thanks
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.