Windows File Service
Windows file service allows Windows, Mac, and Linux clients with SMB/CIFS support to access data stored on the Synology NAS. If you would like to browse files on the Synology NAS via Windows Explorer or mount shared folders as network drives, please enable this option at Control Panel > File Services > Win/Mac/NFS.
To enable Windows file service:
- Tick Enable Windows file service.
- Click Apply.
Note:
After enabling Windows file service, you can mount fully indexed folders to your Mac computer via SMB, and use Finder to search for the files contents within the mounted folders.
Workgroup
This option allows you to designate the system as a member of a specific workgroup for network management purposes.
Note:
- The name of a workgroup can include 1 to 15 characters. The name cannot include the following characters: [ ] ; : " < > * + = \ / | ? ,
- If you are using a Mac running OS X 10.9 and your Synology NAS has joined a Windows domain, you can log in by adding localhost\ before your Synology NAS local username to access files stored on the Synology NAS via Windows file service.
Enabling Transfer Logging
Checking this option enables logging of file access operations, including creating, deleting, reading, writing, moving, and renaming files or folders via CIFS/SMB protocol, also known as Windows File Transfer protocol.
Advanced Settings
Click the Advanced Settings button to see the below options.
- WINS Server: Microsoft Windows Internet Name Service (WINS) is a NetBIOS name-to-IP-address mapping service. Window users will locate the system more easily on TCP/IP networks if the system has been configured to register with a WINS server.
- Max protocol for Windows File Service: Depending on your network configuration, you can set the highest protocol level that will be supported by your Synology NAS.
- Enable SMB 2: SMB (Server Message Block) 2 has been supported since Windows Vista and is the enhanced version of SMB. SMB 2 adds the ability to compound multiple SMB actions into a single request to reduce the number of network packets and enhance performance.
- Enable SMB 2 with Large MTU: Maximum transmission unit (MTU) refers to the largest data unit that can be passed over a communications protocol. In order to take advantage of faster network interfaces, such as 1- or 10-gigabit Ethernet, Large MTU increases the maximum transmission unit to 1 megabyte (MB). Enabling Large MTU improves the speed and efficiency of large file transfers, while reducing the number of packets that need to be processed.
- Enable SMB 3: SMB 3 has been supported since Windows 8 and Windows Server 2012. It is the enhanced version of SMB 2. SMB 3 supports AES-based file encryption transmission, thus improving the security of peer-to-peer file transfers.
Note:
- SMB 2 is supported on Windows Vista, Windows Server 2008 R2, Windows 7, and later.
- Large MTU is supported on Windows Server 2008 R2, Windows 7, and later.
- In order to make large MTU effective with your Windows computer, you will need to modify your computer's registry settings. For more details, please refer to Microsoft technical support (such as this article).
- Transport encryption mode: When SMB 3 is enabled, Windows File Service will add transport encryption to strengthen file transmission security.
- Disable: No transport encryption will be applied.
- Auto: Transport encryption will only be applied to clients supporting this feature.
- Force: Transport encryption will always be applied. This will cause clients that do not support transport encryption to be unable to use Windows File Service.
- Transport encryption is supported on Windows 8, Windows Server 2012, and later.
- Anonymous logon for Windows File Service is not supported when transport encryption is enabled.
- When transport encryption is enabled, please leave Disable Opportunistic Locking unchecked to avoid application timeouts.
- Disable Opportunistic Locking: Checking this option disables "Opportunistic Locking" of CIFS, resulting in increased performance when database applications access database files on the shared folder of the Synology NAS device via network.
- Enable Local Master Browser: When multiple Windows computers exist within the same subnet, they will negotiate and elect one computer as a "local master browser." The local master browser maintains lists of the other computers within the subnet and their shared resources, and shares these lists with the other computers. This option allows the Synology NAS to assume the role of local master browser.
- Enable DirSort VFS module: Sorts folder names and lists them alphabetically. Enabling this option affects system performance.
- Veto files: Hides files according to specified criteria. Criteria can include wildcards (*), and multiple entries should be separated by a slash (/). For example: /abc*/*.txt/*.conf/. Enabling this option affects system performance.
- Allow symbolic links within shared folders: Enabling this option allows symbolic links to point to files or folders within the same shared folder. Symbolic links can be created using DSM terminal.
- Allow symbolic links across shared folders: Enabling this option allows symbolic links to point to files or folders in different shared folders. Symbolic links can be created using DSM terminal. Please note that enabling this option might allow users without access privileges to see and access shared folders that are the target of symbolic links.
- Enable MSDFS VFS module: Allows symbolic links to point to files or folders located on other SMB servers. With older versions of Windows, such as Windows XP, the client and Synology NAS need to join a Windows domain before enabling this option. To learn more about creating MSDFS links, please see here. Please note that the cache of the client device should be cleared after disabling this option, otherwise normal performance might be affected.
- Disable multiple connections from the same IP address: When this option is enabled, the Synology NAS only allows one connection per IP address from clients using Windows File Service. When multiple clients with same IP address use Windows File Service, the Synology NAS will keep the latest one and drop any older connections. In a NAT environment, the client might be using a single IP address, in which case enabling this option might affect the normal performance.
- Collect debug logs: When this option is enabled, detailed logs will be stored for debugging purposes. Enabling this option affects system performance.
- Apply default UNIX permissions: Enable this option to apply the default UNIX permissions when uploading or creating files and folders. The UNIX permission will be 744 for files and 755 for folders. When this option is disabled, UNIX permission is 777 for files and folders.
- For Windows ACL enabled shared folders (all shares excluding "photo" and shares on external drives), please run the chmod command on your Linux or FTP client to change folder and file permission types from Windows ACL to UNIX.
- Enabling this option might cause inconsistent permission issues between different protocols. To avoid inconsistencies, we suggest leaving this option disabled.
- Do not reserve disk space when creating files: Enable this option to disallow disk space from being reserved when creating files on your Synology NAS.
- Clear SMB cache: Click this button to delete the following SMB cache files for troubleshooting purposes:
- /var/cache/samba/netsamlogon_cache.tdb
- /var/lib/samba/winbindd_cache.tdb
- /var/lib/samba/share_info.tdb
- /var/lib/samba/registry.tdb
- /run/samba/connections.tdb
- /run/samba/gencacche.tdb
- /run/samba/gencache_notran.tdb
Note:
Note:
Enabling this function disables hard disk hibernation and activates the guest account without a password.