Best Practices for file sharing

Question

Hello Colleagues,&nbsp;Do we have a best practice guide available in order to comfort different usage scenarios ?&nbsp;I have searched the forum and also found the below guide.http://kb.netgear.com/app/answers/detail/a_id/7066/~/setting-active-directory-folder-permissions-on-readynas-os6&nbsp;Unfortunately we feel it lacks some details we were hoping to find.&nbsp;We try to do the following:&nbsp;AccountPrivilegesAD domain admin users???Contents contributor , OwnersRead/WriteAD domain usersRead onlyWe are not clear yet about permission of AD domain admin user group.We tried multiple ways to set it up.&nbsp;&nbsp;Whatever we tried, we get full privileges for all domain users (admin and non privileged users).&nbsp;Only user "Everyone" can be set to read only.&nbsp;Any help is appreciated.&nbsp;---RN516Firmware 6.2.4

JennC · Answer

Hello AJTID,
&nbsp;
Setting up permission to the shares of the NAS when the NAS is integrated to AD needs not much config on the admin page, it's just share should be set to Everyone with read/write access and Allow anonymous access should not be marked as enabled. Then the rest of the permissions should be configured on the Windows server using the administrator account that you entered on the admin page's Authentication to set it to AD.
&nbsp;
Make sure also that when you switch to Local users under Authentication you have no local user listed that has the same name with one of the shares and/or one of the domain users.
&nbsp;
See also step 3 at http://kb.netgear.com/app/answers/detail/a_id/12261/related/1 for permissions setup.
&nbsp;
Regards,

AJTID · Answer

JennC,&nbsp;We followed the instructions on the page you gave even before posting.When we try to do that we always get read/write permissions for domain users AND domain admins.However we want general domaun users to have only read privileges, Folder and group Owners should have read/write privileges.&nbsp;But as group owners doesnt mean "Domain users" or "Domain groups" only.&nbsp;Hope thats not to confusing.&nbsp;&nbsp;

JennC · Answer

Hello AJTID,
&nbsp;
Thanks for responding.
&nbsp;
This is a setting on the AD server already. It may be best for us to wait for suggestions from others in the community who are also using AD server with the NAS.
&nbsp;
Regards,

AJTID · Answer

Hello　JennyC,&nbsp;I will open a support case ID.Hopefully this will lead quicker to a success ;-)&nbsp;We have spent already more than a week on this.Something is quirky or buggy.

AJTID · Answer

JennyC,&nbsp;The way we were able to make it work is different from the manual we found athttp://kb.netgear.com/app/answers/detail/a_id/7066/~/setting-active-directory-folder-permissions-on-readynas-os6&nbsp;1) In our case we dont touch File access in Menu Shares&gt;&gt; Shares&gt;&gt; &lt;Foldername&gt; &gt;&gt; Settings2) In Network access tab &nbsp;we add the "read only" group.3) save it4)&nbsp;In Network access tab we add the "read write" group.5) Save it&nbsp;Lessons learned:- Saving the config at each step is important.- Wait until each step is completed. Sometimes the NAS starts a script, pauses than continues the script until complete.Allow amble time before proceeding to next step. Make sure the action is settled.&nbsp;&nbsp;JennyC,&nbsp;kindly reconfirm our findings.If you think they are correct It might be worth updating the guide.http://kb.netgear.com/app/answers/detail/a_id/7066/~/setting-active-directory-folder-permissions-on-readynas-os6&nbsp;I think many users are confused beacuse they don't realize they might have to manually add the user group or user for the network access.&nbsp;- If you change interface options please update the manual.- Mention in the manual for which firmware version it applies.- Please create a workshop style setup scenarios&nbsp;

Forum Discussion

Best Practices for file sharing

9 Replies

Related Content

User Account Share Access Best Practices

Ethernet Backhaul Best Practices

Ethernet Backhaul Best Practices

Best Practices Preparing for Firmware Upgrade

Aall shares have disappered from the web UI

NETGEAR Academy

ProSupport for Business

Account	Privileges
AD domain admin users	???
Contents contributor , Owners	Read/Write
AD domain users	Read only