Grant AD user same rights as local admin user

Questions about using Windows AD service.
thn
New here
Posts: 2
Joined: Wed Jan 09, 2013 5:30 am

Grant AD user same rights as local admin user

Post by thn » Wed Jan 09, 2013 5:46 am

Hi

I have successfully joined my TS-659 Pro II to my domain, shared some folders and it works great. The problem is that I am unable to grant my Domain Admins group the rights to administer the NAS as if they were members of the local administrator's group on the NAS. Is it just not posible to grant full access to AD users?

LarsN
Experience counts
Posts: 1545
Joined: Tue Dec 18, 2012 9:29 am
Contact:

Re: Grant AD user same rights as local admin user

Post by LarsN » Wed Jan 09, 2013 12:22 pm

This is currently not a supported feature, but we'll try to add this in a future firmware release.

thn
New here
Posts: 2
Joined: Wed Jan 09, 2013 5:30 am

Re: Grant AD user same rights as local admin user

Post by thn » Wed Jan 09, 2013 7:46 pm

Thank you for the quick reply. Great service :)

jurschel
First post
Posts: 1
Joined: Thu Feb 14, 2013 6:41 am

Re: Grant AD user same rights as local admin user

Post by jurschel » Thu Feb 14, 2013 6:50 am

I agree. In a large enterprise this is a requirement to be able to delegate administration of these appliances. Please add this asap!

JordanF
First post
Posts: 1
Joined: Wed Feb 20, 2013 5:24 am

Re: Grant AD user same rights as local admin user

Post by JordanF » Wed Feb 20, 2013 5:37 am

I would also like to +1 this.

Having read your FAQ (thank you QNAPLars) I would just like to further the business case.

We primarily rely on Windows servers for our DC's, ASP.Net LOB Apps, and File Services.
I purchased this TS-219Pii as both an onsite baremetal backup destination for a few of our servers, and as a test bed to see if the QNAP's OS can handle some of our File Services needs.

The ability to delegate AD users to local groups (especially the local Administrators group) is a must in a corporate environment. As it stands, I have to pass out our local admin login to our IT contractors as well as several members of my staff. Given the current usage of the device, this is not a major issue. We would, however, need this capability should we need to use QNap devices in a more active role.

Appreciate the work you're doing as a user advocate!

mrechter
New here
Posts: 8
Joined: Thu Jan 13, 2011 1:47 pm

Re: Grant AD user same rights as local admin user

Post by mrechter » Fri Jun 28, 2013 9:28 am

+1

SovereignOrb
New here
Posts: 6
Joined: Wed Feb 06, 2008 5:22 pm

Re: Grant AD user same rights as local admin user

Post by SovereignOrb » Fri Oct 25, 2013 2:33 am

Would the LDAP authentication option let me create ldap users which could admin multiple qnap devices? I''m trying to consolidate authentication and it would be really nice to be able to an employee access to my qnap devices without haveing to create a separate account for him on each one.

styne666
First post
Posts: 1
Joined: Wed Jun 05, 2013 10:40 pm

Re: Grant AD user same rights as local admin user

Post by styne666 » Sat May 17, 2014 3:31 am

Any progress? This seems so fundamental for anything joined to a domain.

anahaym
New here
Posts: 6
Joined: Mon Mar 24, 2014 10:44 pm

Re: Grant AD user same rights as local admin user

Post by anahaym » Thu Jul 24, 2014 8:55 pm

TS-459 Pro
AD 2012 R2
still is not possible...

User avatar
doktornotor
Ask me anything
Posts: 7521
Joined: Tue Apr 24, 2012 5:44 am

Re: Grant AD user same rights as local admin user

Post by doktornotor » Thu Jul 24, 2014 8:58 pm

And will never be possible without making use of PAM.
I'm gone from this forum till QNAP stop wasting volunteers' time. Get help from QNAP helpdesk instead.
Warning: offensive signature and materials damaging QNAP reputation follow:
QNAP's FW security issues
QNAP's hardware compatibility list madness
QNAP's new logo competition
Dear QNAP, kindly fire your clueless incompetent forum "admin" And while at it, don't forget the webmaster!

porka
Starting out
Posts: 11
Joined: Fri May 27, 2011 8:09 pm

Re: Grant AD user same rights as local admin user

Post by porka » Mon Aug 04, 2014 7:53 pm

+1 Is this ever going to be implemented ?

User avatar
doktornotor
Ask me anything
Posts: 7521
Joined: Tue Apr 24, 2012 5:44 am

Re: Grant AD user same rights as local admin user

Post by doktornotor » Mon Aug 04, 2014 8:05 pm

:arrow: http://helpdesk.qnap.com/index.php?/Tickets/Submit

Won't get any QNAP attention here. Instead, QNAP has been insisting on completely whacky things such as deliberately crippling their SSH to allow root logins ONLY.
I'm gone from this forum till QNAP stop wasting volunteers' time. Get help from QNAP helpdesk instead.
Warning: offensive signature and materials damaging QNAP reputation follow:
QNAP's FW security issues
QNAP's hardware compatibility list madness
QNAP's new logo competition
Dear QNAP, kindly fire your clueless incompetent forum "admin" And while at it, don't forget the webmaster!

Celer21
New here
Posts: 2
Joined: Wed Feb 04, 2015 11:46 pm

Re: Grant AD user same rights as local admin user

Post by Celer21 » Wed Feb 04, 2015 11:56 pm

Hi, I have TS-421U connected to Windows Domain.
I want to access Web GUI and have same functionality like local "admin" account with my domain user account.
So i tried edit /etc/group file via SSH and add domain user account to administrators group.
(administrators:x:0:admin,domain\username)

Now, I am able to connect to QNAP gui with domain login (domain\username) and have same permission like local admin, add/remove users, create shared folders, backup, etc...

I don't know, if its safe, but it's working.

Danixu86
Starting out
Posts: 17
Joined: Sat Jan 16, 2016 7:48 pm

Re: Grant AD user same rights as local admin user

Post by Danixu86 » Sat Dec 03, 2016 9:55 pm

Celer21 wrote:Hi, I have TS-421U connected to Windows Domain.
I want to access Web GUI and have same functionality like local "admin" account with my domain user account.
So i tried edit /etc/group file via SSH and add domain user account to administrators group.
(administrators:x:0:admin,domain\username)

Now, I am able to connect to QNAP gui with domain login (domain\username) and have same permission like local admin, add/remove users, create shared folders, backup, etc...

I don't know, if its safe, but it's working.


Thanks!!, is working fine...

We're waiting for this feature but never comes...

A way to do it with usermod command:
usermod -a -G administrators DOMAIN\\user

asdf123
New here
Posts: 2
Joined: Tue Feb 14, 2017 11:55 pm

Re: Grant AD user same rights as local admin user

Post by asdf123 » Wed Feb 15, 2017 12:23 am

Got excited there for a minute. I tried the above trick adding the domain\username but it doesn't work on my TS-453A with QTS version 4.2.3. I even rebooted the box but alas QNAP just not ready for prime time.

Post Reply

Return to “Windows Domain & Active Directory”