Active Directory Configuration

The Active Directory (AD) service provides access to a Microsoft Active Directory database, which stores information about users, groups, shares, and other shared objects.

The AD service has two modes: domain mode and workgroup mode. These modes dictate how SMB users are authenticated. When operating in domain mode, SMB clients are authenticated through the AD domain controller. In workgroup mode, SMB clients are authenticated locally as local users. See Configuring Users for more information about local users.

You can add an AD user as an appliance administrator. For more information, see Configuring Users.

Use one of the following methods to integrate with AD:

• Point your LDAP configuration at AD.

  AD must contain UNIX data and the AD service must use UNIX-style names.

• Join an AD domain.

  Use an AD name@domain username. You do not need to configure LDAP or add UNIX data to AD.

To configure Active Directory, see the following sections:

• Joining an AD Domain (BUI)

• Joining an AD Workgroup (BUI)

• Automatically Configuring LDAP for an AD Domain (BUI)

• Configuring Active Directory (CLI)

• Active Directory Join Domain

• Active Directory Domains and Workgroups

• Active Directory Windows Support