Planet NAS-5400, User Manual

Page: 73 / 152

67
Please note that in the
“
Domain:
”
field, you can type a fully qualified domain name (up to 63
characters) or NetBIOS domain name (up to 15 bytes).
Applying Windows domain Privilege Settings
After the server has successfully joined in a Windows domain, a new tab will appear on the
Security Setup
à
Account Setup screen, called
“
Windows Domain Accounts
”
, containing a copy of
all user accounts. (For setup instructions, see Security Setup
à
Account Setup
à
Windows Domain
Accounts ).
In the future when a Windows or Mac client attempts to access the NAS server, the server will
forward the entered account and password to the Windows domain controller for authentication. If
the authentication passes, access right to the NAS server will be granted. However, if the
authentication fails, the NAS server will take over the authentication task and grant the user
access right if the entered account and password corresponds to a local user.
Note:
1. After moving a NAS server from a Windows domain, or workgroup to another domain or
workgroup, the NAS server may still appear in the original domain or group in the Windows
clients
’
My Network Places. This is a restriction of the My Network Places module itself and does
not involve a breach of security: the server does in fact not exist any longer in the original
domain or workgroup.
2. When NAS server is added into the Windows domain, if Windows domain controller is not able
to operate properly, Windows client users will not be able to access the NAS server. This is the
limitation of Windows. Setting multiple Windows domain controllers can eliminate the chance of
happening.
3. For security reasons, an existing root account on the Windows domain will not be merged with
the root account of the NAS server. In other words, if a client attempts to log into the NAS server
with the root account, he must enter the NAS root password to gain access as system
administrator.
4. Once a NAS server is part of a domain, only users in the same Windows domain can access
the server. Members of other domains or workgroup cannot access the server. E.g., if your NAS
server is part of a Windows domain A , and the Windows in this domain knows an account user1
with the password 123. If the client to which this account belongs to another domain B , the client
will still not be able to access to NAS server, even when providing the correct login information
on the account.
Synchronization settings
After the NAS server successfully joins in the Windows domain, there will be an additional tab
named
“
Synchronization settings
”
appearing next to the existing tab
“
Windows Network
”
. In this