Welcome to NETVN channel
In this video, I will show you how to turn your Synology NAS into a Domain Controller
It will help you reduce your work load
First you install the Synology Directory Server application
When you install Synology Directory Server, the DNS Server application will also be installed
It is important that you set up a static ip address for your Synology NAS
My NAS device is named Synology, this is used to access shared folders
In this example I set ip address 192.168.1.254 for Synology NAS
Then set the dns address to be the same as the ip address of the Synology NAS, both 192.168.1.254
You'll see how it's faster and easier to create domains on a Synology NAS than on Windows Server
Next I create a new domain
My domain name is netvn.local, you set it up depending on your organization
Then set a password for the domain administrator account
Synology NAS tests a few things for you
So everything is good
As you can see Synology NAS becomes Domain controller in few steps
But how is it used, I will create new user, create new group and create shared folder
I created a new Organizational unit named New York
Then create a username Mary
Pretty much the same on Windows operating system, isn't it?
Next create a new group named sales
I added mary to the Sales group
It's as simple as that, you can add as many users and groups as you want
In order for the client computers to access the internet I set up DNS as above
I replaced the router ip address with the Google DNS address
Next I create a new shared folder for the Sales group
The shared folder is called Sales and it is set to a maximum limit of 150 GB
Mary has read and write permissions for this folder so I set read and write permissions for Sales group
That way I can set permissions for groups or domain users for shared folders
Just like on Windows Server I want when Mary logs in she will be mapped to a folder where she has read and write permissions
More specifically, on her computer there is a drive mapped to the Sales folder
The basic steps are done, I will check the results on the Windows 11 client
On Windows 11 computers, you need to set up Group Policy to be able to join the domain
If you use Windows 10 then skip this step
Computer configuration
Windows settings
Security settings
Security Options
Network security Configuration encryption types allowed for Kerberos
You choose two options as above
For the changes to take effect I restarted my Windows 11 computer
Then you join the domain as usual
I set up the dns address for my Windows 11 computer to be the ip address of the Synology NAS
192.168.1.254
After setting up the dns address for the client I join the domain
I named this computer CL 01
Next enter the admin username and password of the domain that has been set up on the Synology NAS
Welcome to the domain, I restarted my Windows 11 computer to complete the setup
As mentioned in the previous section, I use Mary's account and access the shared folder
In the Sales group you can create more users for multiple people to share the same file
Successfully, on Mary's computer appeared another drive and it was a shared folder on Synology NAS
She will add a file to check read and write permissions for this directory
Do you want to manage this domain like Windows Server, perhaps yes
In this part I will show you how to do it
I went to the Synology NAS management page and saw a computer that just joined the domain, it's named CL01
On my Windows 10 computer I install the above features
You can also install these features on Windows 11
Here I install two features
Active Directory Domain Services Features
And the Group Policy Management Tools feature
Of course I set this computer to join the domain
Next set the dns address as the ip address of the Synology NAS
192.168.1.254
Unlike Windows 11, Windows 10 does not need to change group policy settings
I named this computer Remote DC
Successful domain join
Restart the computer to complete the setup
To control the domain I log in with an admin account
I checked the control panel
Then search for Administrative Tools
And I found the same features on Windows Server operating system
I will add a new user to test
I access the domain and saw the username and group created in the previous step
Next I create a new username
Add user successfully
Then I added John to the Sales Group
Very similar on Windows Server isn't it
And here are the basic steps to turn Synology NAS into a Domain Controller
Thanks for watching, don't forget to like and subscribe
Will the new username be updated on the Synology NAS?
That can only be known when accessing the Synology NAS management page
Great, John appeared