Synology Directory Server

DSM Version

Synology Directory Server

Features

  • Centrally secures and manages identities of users, groups, and devices within an organization
  • Automates and integrates identity and access control into IT operations
  • Supports Active Directory group-based access controls

Specifications

  • Domain functional level: Equal to Windows Server 2008
  • Samba version: 4.10
  • Maximum objects support:
    • DSM UI operation: 10,000*
    • Windows RSAT operation: 20,000*
    • Note: The actual figure depends on the capability of your Synology NAS (learn more)
  • Maximum groups that a user can join: 50
  • Maximum concurrent connections: 2,000*
  • Supports two domain controllers (a primary server and a secondary one)
  • Supports domain migration from Windows Server 2008 or earlier versions
  • Supports domain clients running Microsoft Windows 7 and above, macOS, and Linux
  • Supports roaming user profiles and home folder creation (learn more)
  • Supports account single sign-on and Windows NTLM
  • Supports TLS domain controller certification
  • Supports custom NetBIOS domain names
  • Supports audit logging
  • Supports Hyper Backup and Synology High Availability for protection of configurations
  • Sets group membership and policies via RSAT (learn more)
  • Adopts Kerberos-based authentication
  • Integrated with DNS Server to register DNS settings upon domain creation
  • Increases account security via account lockout policies and password strength policies (e.g., expiration period, password length, and historical record comparison)

Limitations

  • Supports a single domain only
  • Distributed File System Replication (DFSR) is not supported
  • The Active Directory module for Windows PowerShell is not supported
  • After a domain is created, SMB signing will be enabled automatically, which may reduce read/write performance during SMB file transfer
  • The secondary domain controller only works with domains created by Synology Directory Server
  • Backups of Synology Directory Server 4.10.15-0244 and above versions cannot be restored on DSM 6.2
  • Backups of Active Directory Server 4.4.5-0077 or earlier versions cannot be restored once the package is updated to Synology Directory Server 4.4.5-0086 or above. We recommend creating a new backup task for the updated package in Hyper Backup and running the task immediately