NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
nickmiller
Feb 07, 2013Aspirant
mapping domain admins to local adminitsrators
I am setting up roaming profiles in my organization. We are using a readynas 3200 for the profile storage. Everything is working fine so far, but I'm trying to allow access to the user folders by doma...
nickmiller
Feb 08, 2013Aspirant
Yeh I don't think I worded it very clearly.
I'm hosting roaming profiles on the ReadyNas. I want to allow domain admins access to the user folders. By default roaming profiles create the folders with only SYSTEM and %USERNAME% having any permissions. It actually clears any inherited permissions and then sets these. There is a gpo that will set the administrators domain group to full access on the folders when they are created. When the share is hosetd on a windows server the gpo works great. Using that gpo while hosting the share on the ReadyNas sets the permissions for a group called administrators on the nas itself ie. pd-lc-rnas1\administrators. This group having full access does not translate into admins on the domain having access. So I was wondering if there was a way to map that group (if it even really exists) to the administrators group in AD. I don't know why the gpo behaves differently when applying permissions to folders on the NAS vs on a windows server, but it does.
I'm hosting roaming profiles on the ReadyNas. I want to allow domain admins access to the user folders. By default roaming profiles create the folders with only SYSTEM and %USERNAME% having any permissions. It actually clears any inherited permissions and then sets these. There is a gpo that will set the administrators domain group to full access on the folders when they are created. When the share is hosetd on a windows server the gpo works great. Using that gpo while hosting the share on the ReadyNas sets the permissions for a group called administrators on the nas itself ie. pd-lc-rnas1\administrators. This group having full access does not translate into admins on the domain having access. So I was wondering if there was a way to map that group (if it even really exists) to the administrators group in AD. I don't know why the gpo behaves differently when applying permissions to folders on the NAS vs on a windows server, but it does.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!