The ultimate guide to setting up a Synology Directory Server in 2023 (2023)

Did you know that the Synology NAS offers Active Directory functionality? Install Synology Directory Server package properly from Package Center and setup Windows domain.

It's a good choice for small businesses that want to control user access and simplify administration—combined with a file server role. Synology NAS offers both worlds. A Windows Server license typically costs around $1,000 with a CAL (Client Access License).

In this article, I will show you how to set up Synology Directory Server.

Hardware requirements for Synology Active Directory Server

A Synology NAS with DSM version at least DSM v6.2 or higher is required. As of this writing, the current version is 7.1. I recommend using the latest version.

Check the hardware requirementsHere;Your Synology NAS should be listed,

Synology with low CPU cannot install Synology Directory Server.

I recommend the Synology NAS model DS723+ without disks or as a 12TB disk pack.

Synology Directory Server Package Features and Limitations

• Supports roaming profiles and home folders
• It also supports group-based access controls.
• Supports group policies
• Supports Windows RSAT tools (install it on a Windows 10 or Windows 11 computer)
• It only supports one domain
• Supports only one domain controller
• Supports primary or secondary controller
• DFS is not supported
• The Active Directory module for Windows PowerShell is not supported

See also the officialSynology Directory Serverbook page

A few tips before installation

• Give your Synology NAS a meaningful hostname
• Set a static IP address
• The Synology NAS should not be a domain member, otherwise the package installation will fail.

How to install Synology Active Directory Server

You can find the Synology Directory Server package in the Package Center of your Synology NAS. If you see the package, it means your NAS is compatible.

You also need to install the DNS server package, which you can find in Synology Package Center. I recommend you to install DNS server first as it is a requirement. DNS Manager configuration is not required as the Synology Directory Server package takes care of everything.

There is one thing you need to configure on your DNS server. It is a redirect to a DNS server connected to the Internet. It could be your internet router's IP address or an external DNS server like Google 8.8.8.8, 8.8..4.4. In the image below I have a forwarder configured on the inbound internet router.

A reader kindly mentioned that adding an external DNS server to the Domains/LDAP setting in Control Panel also works. Add an additional DNS server, separated by a comma.

Configure the Active Directory server

After installing the Active Directory Server package, you can find it in the main menu. Click on the package and a wizard will guide you through the package. The first question is crucial. You will need to enter your domain name and password for the administrator account. Take some time to choose your domain name before setting up your server.

Go to DNS Manager. You will see a new DNS zone with your domain name (integrated into Active Directory). As you know, Windows Active Directory requires a DNS zone. The installation wizard created it automatically. If you click on the zone name, all standard data sets are displayed. New records are created for each customer when they join the domain. Of course, you can also create records manually.

Manage your Synology Active Directory server

On the left three tabs "Status", "Users & Computers" and "Domain Policy" you will see Active Directory again. The Active Directory structure is displayed on the Users and Computers tab. It is the same structure you would see in the Windows domain. The Add button allows you to create a new user, computer, or organizational unit.

However, I recommend that you manage Active Directory on a Windows 10 computerRSAT(Remote Server Management) tools.

As of Windows 10 October 2018 update, RSAT is included. You must activate it using the "Features on Demand" option. After successful activation, you can find the RSAT tools under Windows administrative tools.

Don't forget to join the Windows 10 computer to the domain first.

folder sharing

I would create shared folders with my Synology NAS. To do this, go to Control Panel, Shared Folder. New to the Permissions tab, you can select Domain Users and Domain Groups from the drop-down menu. As you can see, local users and local groups still exist. These are the local accounts of the Synology NAS. If you have created accounts, they will remain untouched after installing Synology Directory Server.

Group Policy

There is no option to use group policies on the Synology NAS. However, you can use RSAT's Windows Group Policy Management tool. It works the same and I haven't encountered any problem with my Synology Active Directory server yet. It's a great tool for small businesses to set up folder redirection, roaming policy, or drive mapping. Even for a business with 20 computers or fewer, organizing your network and providing a consistent experience for your users makes perfect sense.

An advice

I have found that using the "User must change password at next logon" option does not work when using the Windows Active Directory for Users and Computers (ADUC) tool. You get a strange error message. Set this option on your Synology NAS if you want to use it.

In theory, you could use other packages from the package manager as well. But I advise you not to use them or use them as little as possible. Only use Synology NAS as "your Windows server". Better buy a second NAS.

fuse

It would be helpful to think about how you would secure your server. A general backup rule is to back up your data3 times.1x production and 2x backups.

In the Package Center you will find a great package called "Hyperbackup". You have the option to back up the data to an external USB drive, or you can also add another Synology NAS as a backup destination and use it to store your data off-site.

Hyperbackup offers the possibility of backing up your data with a cloud provider. I recommend backing up to another Synology NAS and additionally backing up to the cloud. For example, Amazon S3 is an affordable cloud provider. Of course you can also choose other providers. Hyperbackup supports them all and is easy to set up.

When choosing a cloud provider, find out who is the best and whether you would like to store your data abroad.

Back to the backup rule: storing your data in the cloud is the third backup.

Questions and Answers section.

Latest comments

Synology NAS offers a Windows server that acts as a domain controller without the need to purchase an expensive Windows license. Installing and maintaining a Windows server is a complex process. Using a Synology NAS as a directory service is easy. It also helps minimize IT support costs. However, don't forget to keep your Synology NAS up to date to use the latest security updates.

Overall, the Synology NAS is easy to set up. If you're looking for a simple software-based solution, this is it.

I hope this article was helpful. If you have any questions let me know in the comments section below or via emailinfo@edywerder.ch.