Administrators based on AD group

[jpsmeele]

Hello Readers,

Do you know if it's possible to manage QNAP's based on AD-group membership. All members of this group should be administrator on the QNAP which this group is added.

For example: We have around 40 QNAP's with all local admin account (and for security reasons) a different password. I want to have a group of people which are allowed to manage this QNAP with their own administrator-account.
Same is for Q'center.

And I don't want to add all my colleagues to each QNAP.

I cannot find it. Anyone an idea?

Thanks in advantage.
Peter

[Trexx]

Have you checked the documentation regarding joining domains, adding groups to local group (Administrator), etc.?

http://docs.qnap.com/nas/4.3/cat2/en/do ... curity.htm
https://www.qnap.com/en-us/how-to/tutor ... -nas-units

[jpsmeele]

Hello Trexx,

Thanks for your reply.
Yes I found this. And for Q'center I added the colleagues one by one.
Can do this also for each QNAP itself, but then I need to add 10 colleagues to 40 QNAP's.
If I get a new colleagues, then I need to do this again for all QNAP's, but also when 1 colleagues is gone.

What I would like to see is that you can add an Active Directory group which you can make local adminstrators. In that case I only have to remove the colleague from the active directory group (or add one), and you don't need to do anything with QNAP or'Q'center.

Best regards
Peter

[Trexx]

Based on what the docs show you should be able t add the group via ldap as long as the Qnap’s are added to the domains first.


Sent from my iPad using Tapatalk

[jpsmeele]

Hello Trexx,

Again thanks for your reply.

Based on the documents, I understood and tried, I only can add the member by member (connecting Q'center and AD was a complex job). For Q'center it is no problem.
For each QNAP a hell of a job.

Best regards
Peter

[Trexx]

Hello Trexx,

Again thanks for your reply.

Based on the documents, I understood and tried, I only can add the member by member (connecting Q'center and AD was a complex job). For Q'center it is no problem.
For each QNAP a ** of a job.

Best regards
Peter

Have you opened a helpdesk ticket with QNAP on that? It seems like it is a bug, but since I haven't played with that use case can't be sure.