Can't access shared folder with AD users

[easyserviceinfo]

Hi Everybody,
I have a problem, I own a DS 409 and a Windows sbs 2003.
I want to share folders on my DS409 and I want them to be accessible by the users of my domain.
So, I added my Nas in the domain, and Via the web interface of my DS409 I can view all my domain users and groups, and grant them RW rights on the folders shared on my NAS. But when I try to access the folder with a AD user, the access is refused, When i access the folder with a NAS user it works !
I don't understand why it doesn't work with AD users !
So do you have an idea ?
thanks a lot.

[KevtheColonel]

I have the same problem and have logged a support request with Synology.

I am using Server 2003 R2 and Windows 7 clients and have just built my NAS environment. The first private share I have created cannot be accessed by my AD users.

[KevtheColonel]

It looks like the problem is actually that I cannot access the NAS by name and only by IP address.

Other posts and Synology themselves say this is because of time being out of sync, but my workstation, NAS and Domain Controller are all in sync and using the same NTP time source.

I have now added a WINS server into the mix, but this hasn't resolved anything. I can ping the NAS, but if I use the command line

net use z: \\nas\share it says unknown username and password?

net use z: \\x.x.x.x\share works ok.

[crazynet24]

I can confirm that this problem occures in our company as well.

Our Synology DS207+ and RS409 are both integrated in the domain. Access on shared folders is only granted to domain-admins for backup purposes. On the first domain controller I can access the folders with its domain name, on the second domain controller the credential window is promped before the shares are listed. That is really confusing me. Both servers are windows 2008 servers R1. On the old windows 2000 servers it works right.

Accessing the shares by using IP-adresses in the UNC-Path is always working, also on the Windows 2008 R1 Servers.

[vm.franklin]

For Windows 7 Clients, please try the suggestions outlined in the ADS Wiki, step 1, notes for Windows 7 Clients.

Hope this helps.

[arix06]

Hi Synology,

I am experiencing the same problem with my RS810RP and RS409.

I am starting to implement Synology to my company and during the testing phase I encountered the same error.

The user was not able to access the shared folder even I added his name to our Privileges Setup and on the Windows ACL security properties.

Everytime the user click the shared folder it is asking for a Username and Password, but Synology is not accepting the AD username password of the users.

But if I tried to click and access the shared folder, the system did not bother me and ask for the username and password.

Only workaround that I found is to type in localhost\admin in the username and the Synology admin password.

Can somebody from Synology help us and solve the issue?


Regards,
Arix

[arix06]

Follow up on this please. I emailed the Synology Support team and their is no reply.

[antoiney]

Sorry, what's the support inquiry number you'd submitted?

[Rasmuschr]

This is a bit of an old post, but i'm gonna put this fix here anyway, since google/serachengines will probably bring people here.

What i found that the problem is with WINS.

The synology will register in WINS with both network cards, even if you are only using 1 and/or only 1 is connected.
In my case 10.x.x.x and a local adress 169.x.x.x

The quick fix i used was to make a failover pair on the network cards (Control Panel->Network->Create-> Network Fault Tolerance only).

That way only 1 ipadress will be registered in WINS and it will work was intended.
Then do a "nbtstat -RR" on your local machine that needs connection to the synology (run as admin on vista and windows 7)
Or if you prefer: a deletion of all network drives connected to the synology on the local PC and a restart and/or wait for WINS cache to timeout.

I'm guessing making a link agregation will work too, since the network cards will both have "non-fictional" adresses, you will need a switch with 802.3ad support for this option tho. I havent tested this scenario.

Hope that helps the people having this problem.

[gevelr]

Hi,

If you notice that you can only access your shares via \\IP\Sharename then you should verify that you use only lowercase characters in the name of the Diskstation. Using only lowercase as diskstation-name solved this problem for me.

Regards,
Rutger