Synology Windows Domain Controller Viewer Questions/Comments - Part 1

I love how much community interaction we're having on the Synology Windows Domain Controller videos! I wanted to take this time to respond to about 22 comments and questions. We will be hosting a technical deep dive training on configuration of Active Directory on Synology. To get your name on the pre-registration list click the training link below!

Affiliate Links (I earn a small percentage of the sale if you use these links):

Contact us for network consulting and best practices deployment today! We support all Grandstream, Synology, DrayTek, Obihai, Poly, Ubiquiti, MikroTik, Extreme, Palo Alto, and more!

Come back for the next video!
Twitter - @WillieHowe
TikTok - @whowe82

SUBSCRIBE! THUMBS-UP! Comment and Share!

[kristopherleslie]

Thanks for picking up my question / comment and good to hear your thoughts!

[markames]

Thanks Willie. Love your Chanel and the topics you cover. I have found Synology NAS a fantastic economic solution to replace SBS servers. Happy clients, No CALs very reliable.

[kayjoe]

I’m happy to discover this NAS supports bring a DC. Gonna be setting this up on my home lab.

[MrPeteris]

Thanks for this video. I am using Synology AD for years and I am very happy with it. Although there has been one minor issue in the last couple of months. Sometimes authentications for individual users may take longer than usual, sometimes up to 15 minutes. This issue is affecting random users and the cause is unknown. Maybe someone has encountered something similar and knows how to solve it?

[jasonperry]

Thanks for answering my questions Willie. I just went to download Synology DC and it looks like my synology device is too old. I can download LDAP and DNS but not DC. 😢

[Moonraker]

Keep in mind with the UDM-SE, there is a problem when IPv6 is enabled on the default VLAN. The UDM-SE will give out its own IPv6 gateway IPv6 address via DHCP to each client along with their DHCP server's IP address of the domain controller. This is a real problem and the only solution seems to be disabling IPv6 on the UDM-SE...

[rfvtech]

Been using samba ad in production environment for 20 years, if you can get the sysvol replication on the backup DC to work its pretty solid. Unfortunately its still only AD 2009 functionality though.

[craigsolow]

Willie love all your videos, question, if you implement Synology AD, and only a few of the PC's are Windows Pro (yes join then to the AD), can the windows home OS systems still SMB and map a drive like normal (not being part of the domain as they cant join cause their not Pro). Looking to see if I can have a mixed environment.

[jhippl]

can you show how to do 802.1x wireless config with this and say unifi and grandstream. I see a lot of places running wifi but no real auth just a psk thats on a sticky note. Sadly i dont know if i can run this, I run into a ton of integration into AD and the hardware provider just hands me an exe install not an ldap connection.

[raumakustiker]

hello willie, do you know, why nested groups arent activated for synology directory server?
i wanted to assign local permission groups to global department groups to handle access on shares.
during hackin in some users in a fresh installed nas and domain, i didnt saw a way to put one group as member of an other group.
didnt find any infos about that..

[BillyBork]

Thank you Willie! This is a perfectly timed series! Im in the process of designing a system for a client with 5 sites and 60 computers (with plans to support 100 computers on 8 sites within the next 2 years). I've been comparing the price/performance differences between a traditional Microsoft AD server setup and the Synology Windows Domain Controller for several weeks. What do you think the timeline will be for the in-depth training and completion of this series? I'm very interested in the training and just signed up on your website! Thank you for this and all your great videos!

[sebastiendeliedekerke]

Hi Willie, I am interested in the Synology AD training but live in Belgium. Your training interest form only allows for US phone numbers. Please advise best way to register...

[HisLoveArmy]

Willie have you ever migrated any clients to azure AD? Thinking of doing that in hopes I don't need onsite DCs?

[JWarrenPhilly]

Do you not use Active Backup on your servers? I abandoned the Hyperbackup option when I started using that. Better reports and the delta options are so handy.

[pinokiopinokio]

Hi

Willy how to remove active directory group policy installed printers? ( AD i mean on synology nas) I had deployed few of the printers on windows 7pro just to test it but i can not remove them even thou i specify Delete instead UPDATE or INSTALL in the GP Printer deploy settings (Printer Manger), Deleted GPO and OU, nothing works, the printer stacked for good, I can not remove it even thou i have ADMIN permissions. Any suggestions or ideas? PS. Dont wont to mess with Windows 7 pro registry.

[andrewseamaster]

I have been giving the C2 identity some love using syno HW and docker. Works more like AAD in a v poor man's version

[ronhoppner]

I haven't been running AD natively through Synology but I basically insist on a Synology on a client's network for M365 or G-Suite backup and the Active Backup for Business suite for server infrastructure. I've never been disappointed. I actually ran a primary DC in Synology VMM for 3 weeks while replacing a completely failed Dell server. No hiccups. I've currently got 4 clients running Windows AD DS from Synology VMM. 16GB of RAM in a 923+ or similar gives you plenty of space for a mid-sized Windows server running AD DS and there's still headroom for Synology stuff. The only downside of AD services on Synology: AAD Connect. If you're syncing the local domain to AAD, you need Windows. I've had great luck with my Snology deployments and it's easy to keep a 923+ on the shelf in case of hardware failure. They're all backed up to eachother and to C2 so it's an easy disaster recovery equation.

[TonyKirkland]

Just tried to access the the training link and got 'connection refused.' You getting DoS'd or something? Also, can Syno and M$ co-exist? Can an existing DC that is M$ act as a backup to Syno?

[agad]

What is we have 2 locations, how can we join?

[kikkeraap]

I get a ERR_CONNECTION_REFUSED while browsing to your website.