User Manual

152
AD Domain Member
Use Microsoft Active Directory (AD) to authenticate users. To use this option, enable Active
Directory authentication in "Privilege Settings" > "Domain Security" and join the NAS to an
Active Directory.
LDAP Domain Authentication
Use an LDAP directory to authenticate the users. To use this option, enable LDAP
authentication and specify the settings in "Privilege Settings" > "Domain Security". When
this option is enabled, you need to select either the local NAS users or the LDAP users that
can access the NAS via Microsoft Networking.
Advanced Options
 WINS server: If you have a WINS server on your network and want to use this server,
enter the WINS server IP. The NAS will automatically register its name and IP address
with the WINS service. Do not enable this option if you are unsure about the settings.
 Local Domain Master: A Domain Master Browser is responsible for collecting and
recording resources and services available for each PC on the network or a workgroup of
Windows. When you find the waiting time for loading network resources to be too long, it
may be caused by a failure of an existing master browser or a missing master browser
on the network. If there is no master browser on your network, select the option
"Domain Master" to configure the NAS as the master browser. Do not enable this option
if you are unsure about the settings.
 Allow only NTLMv2 authentication: NTLMv2 stands for NT LAN Manager version 2.
When this option is enabled, login to the shared folders by Microsoft Networking will only
be allowed using NTLMv2 authentication. If the option is disabled, NTLM (NT LAN
Manager) will be used by default and NTLMv2 can be negotiated by the client. The
default setting is disabled.
 Name resolution priority: You can select to use DNS server or WINS server to resolve
client host names from IP addresses. When you set up your NAS to use a WINS server or
to be a WINS server, you can choose to use DNS or WINS first for name resolution.
When WINS is enabled, the default setting is "Try WINS then DNS". Otherwise, DNS will
be used for name resolution by default.
 Login style: DOMAIN\USERNAME instead of DOMAIN+USERNAME for FTP, AFP,
and File Station: In an Active Directory environment, the default login formats for the
domain users are:
o Windows shares: domain\username
o FTP: domain+username
o File Station: domain+username
o AFP: domain+username