Grant AD user same rights as local admin user
-
- New here
- Posts: 2
- Joined: Wed Jan 09, 2013 5:30 am
Grant AD user same rights as local admin user
Hi
I have successfully joined my TS-659 Pro II to my domain, shared some folders and it works great. The problem is that I am unable to grant my Domain Admins group the rights to administer the NAS as if they were members of the local administrator's group on the NAS. Is it just not posible to grant full access to AD users?
I have successfully joined my TS-659 Pro II to my domain, shared some folders and it works great. The problem is that I am unable to grant my Domain Admins group the rights to administer the NAS as if they were members of the local administrator's group on the NAS. Is it just not posible to grant full access to AD users?
-
- Experience counts
- Posts: 1543
- Joined: Tue Dec 18, 2012 9:29 am
- Contact:
Re: Grant AD user same rights as local admin user
This is currently not a supported feature, but we'll try to add this in a future firmware release.
-
- New here
- Posts: 2
- Joined: Wed Jan 09, 2013 5:30 am
Re: Grant AD user same rights as local admin user
Thank you for the quick reply. Great service
-
- First post
- Posts: 1
- Joined: Thu Feb 14, 2013 6:41 am
Re: Grant AD user same rights as local admin user
I agree. In a large enterprise this is a requirement to be able to delegate administration of these appliances. Please add this asap!
-
- First post
- Posts: 1
- Joined: Wed Feb 20, 2013 5:24 am
Re: Grant AD user same rights as local admin user
I would also like to +1 this.
Having read your FAQ (thank you QNAPLars) I would just like to further the business case.
We primarily rely on Windows servers for our DC's, ASP.Net LOB Apps, and File Services.
I purchased this TS-219Pii as both an onsite baremetal backup destination for a few of our servers, and as a test bed to see if the QNAP's OS can handle some of our File Services needs.
The ability to delegate AD users to local groups (especially the local Administrators group) is a must in a corporate environment. As it stands, I have to pass out our local admin login to our IT contractors as well as several members of my staff. Given the current usage of the device, this is not a major issue. We would, however, need this capability should we need to use QNap devices in a more active role.
Appreciate the work you're doing as a user advocate!
Having read your FAQ (thank you QNAPLars) I would just like to further the business case.
We primarily rely on Windows servers for our DC's, ASP.Net LOB Apps, and File Services.
I purchased this TS-219Pii as both an onsite baremetal backup destination for a few of our servers, and as a test bed to see if the QNAP's OS can handle some of our File Services needs.
The ability to delegate AD users to local groups (especially the local Administrators group) is a must in a corporate environment. As it stands, I have to pass out our local admin login to our IT contractors as well as several members of my staff. Given the current usage of the device, this is not a major issue. We would, however, need this capability should we need to use QNap devices in a more active role.
Appreciate the work you're doing as a user advocate!
-
- New here
- Posts: 8
- Joined: Thu Jan 13, 2011 1:47 pm
-
- New here
- Posts: 6
- Joined: Wed Feb 06, 2008 5:22 pm
Re: Grant AD user same rights as local admin user
Would the LDAP authentication option let me create ldap users which could admin multiple qnap devices? I''m trying to consolidate authentication and it would be really nice to be able to an employee access to my qnap devices without haveing to create a separate account for him on each one.
-
- First post
- Posts: 1
- Joined: Wed Jun 05, 2013 10:40 pm
Re: Grant AD user same rights as local admin user
Any progress? This seems so fundamental for anything joined to a domain.
-
- New here
- Posts: 6
- Joined: Mon Mar 24, 2014 10:44 pm
Re: Grant AD user same rights as local admin user
TS-459 Pro
AD 2012 R2
still is not possible...
AD 2012 R2
still is not possible...
- doktornotor
- Ask me anything
- Posts: 7472
- Joined: Tue Apr 24, 2012 5:44 am
Re: Grant AD user same rights as local admin user
And will never be possible without making use of PAM.
I'm gone from this forum till QNAP stop wasting volunteers' time. Get help from QNAP helpdesk instead.
Warning: offensive signature and materials damaging QNAP reputation follow:
QNAP's FW security issues
QNAP's hardware compatibility list madness
QNAP's new logo competition
Dear QNAP, kindly fire your clueless incompetent forum "admin" And while at it, don't forget the webmaster!
Warning: offensive signature and materials damaging QNAP reputation follow:
QNAP's FW security issues
QNAP's hardware compatibility list madness
QNAP's new logo competition
Dear QNAP, kindly fire your clueless incompetent forum "admin" And while at it, don't forget the webmaster!
-
- Starting out
- Posts: 11
- Joined: Fri May 27, 2011 8:09 pm
Re: Grant AD user same rights as local admin user
+1 Is this ever going to be implemented ?
- doktornotor
- Ask me anything
- Posts: 7472
- Joined: Tue Apr 24, 2012 5:44 am
Re: Grant AD user same rights as local admin user
http://helpdesk.qnap.com/index.php?/Tickets/Submit
Won't get any QNAP attention here. Instead, QNAP has been insisting on completely whacky things such as deliberately crippling their SSH to allow root logins ONLY.
Won't get any QNAP attention here. Instead, QNAP has been insisting on completely whacky things such as deliberately crippling their SSH to allow root logins ONLY.
I'm gone from this forum till QNAP stop wasting volunteers' time. Get help from QNAP helpdesk instead.
Warning: offensive signature and materials damaging QNAP reputation follow:
QNAP's FW security issues
QNAP's hardware compatibility list madness
QNAP's new logo competition
Dear QNAP, kindly fire your clueless incompetent forum "admin" And while at it, don't forget the webmaster!
Warning: offensive signature and materials damaging QNAP reputation follow:
QNAP's FW security issues
QNAP's hardware compatibility list madness
QNAP's new logo competition
Dear QNAP, kindly fire your clueless incompetent forum "admin" And while at it, don't forget the webmaster!
-
- New here
- Posts: 2
- Joined: Wed Feb 04, 2015 11:46 pm
Re: Grant AD user same rights as local admin user
Hi, I have TS-421U connected to Windows Domain.
I want to access Web GUI and have same functionality like local "admin" account with my domain user account.
So i tried edit /etc/group file via SSH and add domain user account to administrators group.
(administrators0:admin,domain\username)
Now, I am able to connect to QNAP gui with domain login (domain\username) and have same permission like local admin, add/remove users, create shared folders, backup, etc...
I don't know, if its safe, but it's working.
I want to access Web GUI and have same functionality like local "admin" account with my domain user account.
So i tried edit /etc/group file via SSH and add domain user account to administrators group.
(administrators0:admin,domain\username)
Now, I am able to connect to QNAP gui with domain login (domain\username) and have same permission like local admin, add/remove users, create shared folders, backup, etc...
I don't know, if its safe, but it's working.
-
- Starting out
- Posts: 24
- Joined: Sat Jan 16, 2016 7:48 pm
Re: Grant AD user same rights as local admin user
Thanks!!, is working fine...Celer21 wrote:Hi, I have TS-421U connected to Windows Domain.
I want to access Web GUI and have same functionality like local "admin" account with my domain user account.
So i tried edit /etc/group file via SSH and add domain user account to administrators group.
(administrators0:admin,domain\username)
Now, I am able to connect to QNAP gui with domain login (domain\username) and have same permission like local admin, add/remove users, create shared folders, backup, etc...
I don't know, if its safe, but it's working.
We're waiting for this feature but never comes...
A way to do it with usermod command:
usermod -a -G administrators DOMAIN\\user
-
- New here
- Posts: 2
- Joined: Tue Feb 14, 2017 11:55 pm
Re: Grant AD user same rights as local admin user
Got excited there for a minute. I tried the above trick adding the domain\username but it doesn't work on my TS-453A with QTS version 4.2.3. I even rebooted the box but alas QNAP just not ready for prime time.