Access shares in ReadyNas2100

[rowanh]

Hi All,

I was hit by Ransomware last week and my SBS2003 file server is now encrypted. Connected to this I had two Netgear ReadyNas servers. The newer ReadyNas 214 was a backup server, I have accessed it and the contents are all fine and untouched.

The ReadyNas 2100 contains all my files and work for the past decade. I can access the Admin area but not the shared drives. The security setting was set to Domain so shares were based on the group accounts in the domain controllers or ADS for login authentication which was held in the now disconnected SBS2003.

Since I have now disconnected my infected File Server which had the ADS I am unable to access my ReadyNas2100.

I have installed a new router and connected my ReadyNas directly to this, bypassing the File Server

How do I go about accessing the RN2100 without losing access to my data or the data itself? I would ideally like to set up the same shares but without the infected fileserver (which I can implement at some point in the future when I have cash).

I have limited IT knowledge but am reasonably good at Googling so step by step answers are appreciated.

Many Thanks

Rowan

[StephenB]

Are you using the "private" home folder feature of your NAS?  Or is all the data in ordinary shares?

[rowanh]

Hi StephenB,

Many thanks for your question. I believe I am using ordinary shares and I have the following settings which may also help.

Security Mode is set to Domain (not User) & Domain Type is ADS

On Shares/Share Listing, I have 3 shares setup all using CIFS

Under CIFS and in the following tabs most settings are not enabled beside the followingI have Allow Guest Access enabled

• CIFS - I have Allow Guest Access enabled
• AFP - Nothing enabled
• HTTP/S - Default access is disabled
• Advanced Options - "Share folder group rights" are set to read/write and "share folder everyone rights" is set to disabled.

Does that help?

Thanks

Rowan

[StephenB]

If you don't care about any information saved in the user accounts, you should be able to change authentication back to local users.

I've never done this (I've never used AD) but it ought to work.  Look in /home first though, and offload any data in there.

[rowanh]

I do care very much about all the content in the shares but unfortunately, I can't reach any of it, I believe this is because the RN2100 is attempting to authorise me from the file server which now no longer exists.

trying to connect to /shares I receive similar errors to this

We can't sign you in with this credential because your domain isn't available. Make sure your device is connected to your organisation's network and try again.

If I switched from Domain to User in SSecurity Mode, would this then bypass the need for a Domain?

[StephenB]

---

@rowanh wrote:

If I switched from Domain to User in SSecurity Mode, would this then bypass the need for a Domain?

---

I think so, yes.  You might need to reset file and network permissions on the shares.

[rowanh]

When doing so I receive the following scary warning...

---

Changing Security mode can cause unrecoverable permission problems with files created under the previous security settings. When changing from the domain mode any user or group restrictions for your shares will no longer apply because these accounts reside on in the domain. Before switching security mode you should temporarily set permissions on your files and folders to Full Control for Everyone from your Windows Client and reset the permissions in the desired settings after the ReadyNAS device security has been changed. You can do this by right-clicking on your files or folders and selecting the security tab.

-- 

since I have no access to those files I am unable to allow Full Control, what is the impact of this?

With regards to resetting file and network permissions on the shares what exactly does this involve

Thanks a bunch for your help StephenB

Cheers

Rowan

[StephenB]

---

@rowanh wrote:

since I have no access to those files I am unable to allow Full Control, what is the impact of this?

---

You reset the permissions from Frontview, you don't need SMB access.

With OS 4.x firmware, the screen you want looks like this:

Match the settings above, and then also check the "set ownership ..." box.  Then click apply on the bottom right.

You do this for each share.  The settings change happens in the background - there will be a pop-up when it completes.  It's also in the logs.

While you are doing this, you can also click on the CIFs tab and apply the settings below:

The net result is that all folders and files are fully accessible, even with guest access.  You can make it more restrictive later on if you need to.

[rowanh]

Thanks, StephenB, I will attempt this tomorrow morning when I am fresh and let you know how I get on.

Many thanks for your advice I do appreciate it.

Cheers

Rowan