Hyper-V over SMB - SYSTEM Account access / configure constrained delegation option

Tell us your most wanted features from QNAP products.
Post Reply
aekash
New here
Posts: 4
Joined: Fri Jan 14, 2011 1:49 am

Hyper-V over SMB - SYSTEM Account access / configure constrained delegation option

Post by aekash » Fri Aug 02, 2019 4:23 am

QNAP provide a feature called domain controller.

I recently enabled the feature and setup a share to deploy Hyper-V over SMB

The folder used by Hyper-V to store virtual machine data requires specific permissions to access the SMB file share. You need to make sure that the Hyper-V computer accounts, the SYSTEM account and all Hyper-V administrators have full control permissions.

I wanted to avoid installing Microsoft Active Directory and joining my QNAP to the domain. So I enabled the QNAP Domain Controller feature and joined my Hyper-V host to the domain created on QNAP. I then created a shared folder and granted the Hyper-V computer account access to the SMB shared folder and also granted the Hyper-V administrator account FULL access to the folder. Unfortunately I was unable to grant the SYSTEM account access to the folder as QNAP does have a built in account for SYSTEM under Domain Controller Users. Is this something you can introduce ?

Step 3: Create an SMB file share
https://docs.microsoft.com/en-us/previo ... v%3Dws.11)

Also would be nice to configure constrained delegation option (similar to the below)

https://charbelnemnom.com/2017/02/confi ... rv-ws2016/

I know I may be asking for a lot but hey these would be really cool features to add :)

Post Reply

Return to “Features Wanted”