Adding a Storage System to an AD Domain

If an AD domain server is deployed on a customer's network, a storage device must join the AD domain. Then, CIFS clients need to be authenticated by the AD domain server when they attempt to access shared resources on the storage device. The administrator can manage the share access permissions and quotas of domain users. If the storage device does not join an AD domain, domain users cannot use share services provided by the storage device.

Prerequisites

An AD domain has been set up.
The storage system has been connected to the DNS server.
The AD domain server and DNS server have time synchronization with the storage system. The time difference must be no larger than 5 minutes.
Ports 88 (TCP/UDP protocol), 389 (TCP/UDP protocol), 445 (TCP protocol), and 464 (TCP/UDP protocol) are enabled between the storage system and the AD domain.

Procedure

Choose Settings > File Service Settings > Domain Authentication.

In the AD Domain area, click Edit to configure AD domain authentication. Table 1 describes related parameters.

**Table 1** AD domain parameters
Parameter	Description
Domain Administrator Username	Indicates the user name of the AD domain administrator. [Value range] The value contains 1 to 63 characters.
Password	Indicates the password of the AD domain administrator. [Value range] The value contains 1 to 127 characters.
System Name	Indicates the name of the storage system in the AD domain. After the storage system is added to the domain, the client can use the name to access the storage system. [Value range] The value contains 1 to 15 characters. It can contain only letters, digits, and hyphens (-) and cannot contain only digits.
Domain Status	Indicates whether the storage system is added to the domain. You can click Join Domain or Exit Domain as required.
Full Domain Name	Indicates the full domain name of the AD domain server. [Value range] The value contains 1 to 63 characters. It can contain only letters, digits, and hyphens (-), and cannot start or end with a hyphen (-). Each section is separated by a period (.). [Example] abc.com NOTE: You can click Test to test the validity of the full domain name.
Organization Unit	Indicates the organization unit of a type of directory objects in the domain. These objects include users, computers, and printers. After an object joins the domain, it will be a member in the organization unit. If this parameter is left empty, objects join the Computers organization unit by default.
Overwrite System Name	If a duplicate system name already exists on the domain control server, the existing system name will be overwritten after this parameter is enabled.

Click Save.