Synology Directory Server

Turn your Synology NAS into a domain controller (DC) to manage users, devices, groups, and domain policies in a breeze.

Seamless authentication

Authenticate users and Synology, Windows, Mac, and Linux platforms.

Bulk management

Deploy updates and policies to multiple users and endpoints at once.

Continuous service

Retain service availability using flexible methods.

Configure domain objects the way you want

Set user permissions

Add, import, or edit accounts with login hours, usable devices, password policies, and more. Modify a user's personal information, home directory paths, and group memberships. Upload login scripts for installing updates, or map network drives.

active_directory.configure_customize_title

Modify group privileges

Change groups to distribution groups for email lists or security groups to assign permissions to shared resources, and set a group's scope as domain local, global, or universal.

Standardizing Windows deployments

Apply Windows Active Directory (AD) group policies to multiple users at once by installing and configuring RSATs (Remote Server Administration Tools) from a separate Windows PC.

Manage users and devices

Monitor users, create personalized experiences, and improve device security.

Create a safer environment

Deploy security updates and software to users or devices, or apply password and account lockout policies to profiles for tightened security.

Bring consistency to user experiences

Enable Roaming User Profiles (RUPs), and allow users sign in to any Windows workstation and have their application settings restored in full. Learn more

Monitor changes in real time

View events and changes made to domain objects from the Log view.

Maximize service availability

Add a controller node for near-instant failover, set up a high-availability cluster with two Synology servers, or protect your server with off-site backups.

Active-active domain controller for instant failover

Secure uninterrupted services in case of system failure by setting up a secondary domain controller or several read-only controllers.

Active-passive configuration for high availability

Combine two Synology systems into an active-passive Synology High Availability (SHA) cluster for automatic minute-level failover. Learn more

Secure built-in backup solution for data protection

Set up secure backups of your Synology Directory Server to multiple locations with Hyper Backup to ensure recovery in case of disaster. Learn more

Highly available directory server

Add a secondary domain controller to Synology Directory Server to take over in case of unexpected disruptions and provide added capacity.

Run a second active domain controller

Replicate all data from one domain controller to another every five minutes. Ensure that all domain services remain available in case of domain controller failure.

Create lower-privileged controller nodes

Read-Only Domain Controllers (RODC) with fewer privileges and limited access to sensitive information can help keep domain services available and responsive in less secure contexts, such as remote deployments at field offices.

dsm_feat_migration_assistant.availability_tab1_title

dsm_feat_migration_assistant.availability_tab2_title

Simplify workflows with single sign-on (SSO)

Provide convenience to domain users with SSO capabilities for Synology Office, Chat, MailPlus, Calendar, and Note Station, for both local and remote access. Learn more