Domain & PrivilegesSynology Directory Server, Windows ACL, and various powerful tools allow you to easily manage user accounts and file access privileges, without needing an IT professional to figure it out.Domain & Privileges

Built-in user account managementThe native accounts management tools on DSM allow you to assign specific storage quotas, speed limits, and access privileges to individual users, or manage the accounts as groups. What's more, each account can also share files with other DSM users and have their own private "Home" folder without worrying about prying eyes.

Join Windows AD or Azure AD SmoothlySynology NAS servers can seamlessly join Windows AD or Azure AD. Single-Sign On (SSO) is supported to integrate all web applications and services. Employees can easily and securely access different services within their organizations using a unified set of credentials. IT administrators benefit greatly from the simplified account provisioning.

Synology Directory ServerTransform your Synology NAS to serve as a domain controller and streamline IT maintenance by creating policies to automatically install certain software or system updates on all of your employees' computers without the need to visit each one individually. Learn more Windows AD and LDAP directoryJoining the established Windows AD or LDAP, DSM can be seamlessly integrated to your exisiting directory services.Windows Active DirectoryFor companies that have established domain user accounts through Windows Active Directory (AD), DSM can join your Windows domain to integrate with your existing account system seamlessly, allowing users to access files and use DSM applications without the need to remember another set of usernames and password.LDAPLikewise, Synology NAS can join an existing directory service as an LDAP client or act as an LDAP server itself with the LDAP Server add-on package installed. Based on LDAP version 3 (RFC2251), your Synology NAS can become an account administration center of all connecting clients and provides authentication service for them.Advanced privilegesYou can set more specific permissions to files, assign quota limit to specific users or shared folders, and even allow application access from specific networks.Windows ACLWith Windows ACL, IT administrators can achieve file-based granular access control and allocate read, write, or administration permissions to different departments. This increases flexibility while maintaining high level of security.QuotaDSM provides the flexibility to set data quota on individual user, volume, or shared folder. This is helpful to manage available storage space effortlessly when multiple teams or departments store files on the same Synology NAS server.Application privilegesAccess to applications and packages can be controlled by assigning different privileges to accounts, user groups, or IP addresses. You can also reserve the access to certain applications for local network. This raises efficiency in management substantially.