QNAP Turbo NAS Software User Manual

Shared Folders

Shared Folders

Previous topic Next topic No directory for this topic  

Shared Folders

Previous topic Next topic Topic directory requires JavaScript JavaScript is required for the print function Mail us feedback on this topic!  

Go to "Control Panel" > "Privilege Settings" > "Shared Folders" to configure shared folders of your NAS.


Shared Folders


You can create multiple shared folders on the NAS and specify the access rights of the users and user groups to the shares. The number of shared folders you can create on the NAS varies according to the NAS models. If your NAS models are not listed, please visit http://www.qnap.com for details.

Maximum number of shared folders

NAS models


TS-110, TS-210, TS-112, TS-119, TS-119P+, TS-212, TS-219P+, TS-x20, TS-x21, TS-410, TS-239 Pro II+, TS-259 Pro+


TS-412, TS-419P+, TS-410U, TS-419U, TS-412U, TS-419U+, SS-439 Pro, SS-839 Pro, TS-439 Pro II+, TS-459U-RP/SP, TS-459U-RP+/SP+, TS-459 Pro+, TS-459 Pro II, TS-559 Pro+, TS-559 Pro II, TS-659 Pro+, TS-659 Pro II, TS-859 Pro+, TS-859U-RP, TS-859U-RP+, TS-809 Pro, TS-809U-RP, TS-x70, TS-879 Pro, TS-1079 Pro, TS-879U-RP, TS-EC879U-RP, TS-1279U-RP, TS-EC1279U-RP


On the folder list, you can view the current data size, number of sub-folders and files created in the shared folder, and the folder status (hidden or not).


To create a shared folder, follow the steps below:

1.Click "Create" > "Shared Folder".
2.Click "Next".
3.Enter the folder settings.
oFolder name: Enter the share name. The share name does not support " / \ [ ] : ; | = , + * ? < > ` '
oDisk Volume: Select which disk volume on which to create the folder.
oDescription: Enter an optional description of the shared folder.
oHide Folder: Select to hide the shared folder or not in Microsoft Networking. When a shared folder is hidden, you have to enter the complete directory \\NAS_IP\share_name to access the share.
oLock file (oplocks): Opportunistic locking is a Windows mechanism for the client to place an opportunistic lock (oplock) on a file residing on a server in order to cache the data locally for improved performance. Oplocks is enabled by default for everyday usage. For networks that require multiple users concurrently accessing the same file such as a database, oplocks should be disabled.
oRecycle Bin: Enable the Network Recycle Bin for created shared folders. The option "Restrict the access of Recycle Bin to administrators only for now", once enabled, will ensure that files deleted and moved to the Network Recycle Bin can only be recovered by administrators.
oPath: Specify the path of the shared folder or select to let the NAS specify the path automatically.
4.Select the way you want to specify the access right to the folder and specify the guest access right.
5.If you select to specify the access right by user or user group, you can select to grant read only, read/write, or deny access to the users or user groups.
6.Confirm the settings and click "Next".
7.Click "Finish" to complete the setup.


To delete a shared folder, select the folder checkbox and click "Remove". You can select the option "Also delete the data. (Mounted ISO image files will not be deleted)" to delete the folder and the files in it. If you select not to delete the folder data, the data will be retained in the NAS. You can create a shared folder of the same name again to access the data.




Folder Property

Edit the folder property. Select to hide or show the network drive, enable or disable oplocks, folder path, comment, restrict the access of Recycle Bin to administrators (files can only be recovered by administrators from the Network Recycle Bin) and enable or disable write-only access on FTP connection.

Folder Permissions

Edit folder permissions and subfolder permissions.


Refresh the shared folder details.


Folder Permissions

Configure folder and subfolder permissions on the NAS. To edit basic folder permissions, locate a folder name in "Privilege Settings" > "Shared Folders" and click "Folder Permissions". The folder name will be shown on the left and the users with configured access rights are shown in the panel. You can also specify the guest access right at the bottom of the panel. Click "Add" to select more users and user groups and specify their access rights to the folder. Click "Add" to confirm. Click "Remove" to remove any configured permissions. You can select multiple items by holding the Ctrl key and left clicking the mouse. Click "Apply" to save the settings.


Subfolder Permissions

The NAS supports subfolder permissions for secure management of the folders and subfolders. You can specify read, read/write, and deny access of individual user to each folder and subfolder.

To configure subfolder permissions, follow the steps below:

1.Go to "Privilege Settings" > "Shared Folders" > "Advanced Permissions" tab. Select "Enable Advanced Folder Permissions" and click "Apply".
2.Go to "Privilege Settings" > "Shared Folders" > "Shared Folders" tab. Select a root folder, for example Dept, and click "Folder Permissions". The shared folder name and its first-level subfolders are shown on the left. The users with configured access rights are shown in the panel, with special permission below. Double click the first-level subfolders to view the second-level subfolders. Select the root folder (Dept). Click "+ Add" to specify read only, read/write, or deny access for the users and user groups.
3.Click "Add" when you have finished the settings.
4.Specify other permissions settings below the folder permissions panel.
oGuest Access Right: Specify to grant full or read only access or deny guest access.
oOwner: Specify the owner of the folder. By default, the folder owner is the creator.
5.To change the folder owner, click the "Folder Property" button next to the owner field.


6.Select a user from the list or search a username. Then click "Set".
oOnly the owner can delete the contents: When you apply this option to a folder, e.g. Dept, only the folder owner can delete the first-level subfolders and files. Users who are not the owner but possess read/write permission to the folder cannot delete the folders Admin, HR, Production, Sales, and test in this example. This option does not apply to the subfolders of the selected folder even if the options "Apply changes to files and subfolders" and "Apply and replace all existing permissions of this folder, files, and subfolders" are selected.
oOnly admin can create files and folders: This option is only available for root folders. Select this option to allow admin to create first-level subfolders and files in the selected folder only. For example, in the folder "Dept", only admin can create files and subfolders Admin, HR, Production, and so on. Other users with read/write access to Dept can only create files and folders in the second and lower-level subfolders such as Admin01, Admin02, HR1, and HR2.
oApply changes to files and subfolders: Apply permissions settings except owner protection and root folder write protection settings to all the files and subfolders within the selected folder. These settings include new users, deleted users, modified permissions, and folder owner. The options "Only the owner can delete the contents" and "Only admin can create files and folders" will not be applied to subfolders.
oApply and replace all existing permissions of this folder, files, and subfolders: Select this option to override all previously configured permissions of the selected folder and its files and subfolders except owner protection and root folder write protection settings. The options "Only the owner can delete the contents" and "Only admin can create files and folders" will not be applied to subfolders.
oSpecial Permission: This option is only available for root folders. Select this option and choose between "Read only" or "Read/Write" to allow a user to access to all the contents of a folder irrespectively of the pre-configured permissions. A user with special permission will be identified as "admin" when he/she connects to the folder via Microsoft Networking. If you have granted special permission with "Read/Write" access to the user, the user will have full access and is able to configure the folder permissions on Windows. Note that all the files created by this user belong to "admin". Since "admin" does not have quota limit on the NAS, the number and size of the files created by users with special permission will not be limited by their pre-configured quota settings. This option should be used for administrative and backup tasks only.
7.After changing the permissions, click "Apply" and then "YES" to confirm.



You can create maximum 230 permission entries for each folder when Advanced Folder Permission is enabled.
If you have specified "deny access" for a user on the root folder, the user will not be allowed to access the folder and subfolders even if you select read/write access to the subfolders.
If you have specified "read only access" for a user on the root folder, the user will have read only access to all the subfolders even if you select read/write access to the subfolders.
To specify read only permission on the root folder and read/write permission on the subfolders, you must set read/write permission on the root folder and use the option "Only admin can create files and folders" (to be explained later).
If an unidentified account ID (such as 500) is shown for a subfolder on the permission assignment page after you click the "Access Permissions" button next to a shared folder in "Control Panel">"Privilege Settings">"Shared Folders">"Shared Folder", it is likely that the permission of that subfolder has been granted to a user account that no longer exists. In this case, please select this unidentified account ID and click "Remove" to delete this account ID.


Microsoft Networking Host Access Control

The NAS folders can be accessed via Samba connection (Windows) by default. You can specify the IP addresses and hosts which are allowed to access the NAS via Microsoft Networking. Follow the steps below to set up:

1.Click "Folder Permissions".
2.Select "Microsoft Networking host access" from the drop-down menu on top of the page.
3.Specify the allowed IP addresses and host names. The following IP address and host name are used as example here:
oIP address: or 192.168.*.*
oHost name: dnsname.domain.local or *.domain.local
4.click "Add" to enter the IP address and host name and then "Apply".


Notifications on characters used:

Wildcard characters: You can enter wildcard characters in an IP address or host name entry to represent unknown characters.
Asterisk (*): Use an asterisk (*) as a substitute for zero or more characters. For example, if you enter *.domain.local, the following items are included: a.domain.local, cde.domain.local, or test.domain.local
Question mark (?): Use a question mark (?) as a substitute for only one character. For example, test?.domain.local includes the following: test1.domain.local, test2.domain.local, or testa.domain.local


When you use wildcard characters in a valid host name, dot (.) is included in wildcard characters. For example, when you enter *.example.com, "one.example.com" and "one.two.example.com" are included.


ISO Shared Folders


You can mount the ISO image files on the NAS as ISO shares and access the contents without disc burning. The NAS supports mounting up to 256 ISO shares.


TS-110, TS-119, TS-120, TS-121, TS-210, TS-219, TS-219P, TS-220, TS-221, TS-410, , TS-119P+, TS-219P+, TS-112, TS-212 support maximum 256 network shares only (including 6 default network shares). The maximum number of ISO image files supported by these models is less than 256 (256 minus 6 default shares minus number of network recycle bin folders).


Follow the steps below to mount an ISO file on the NAS by the web interface:

1.Login the NAS as an administrator. Go to "Share Folders" > "Create". Click "Create an ISO Share".
2.Select an ISO image file on the NAS. Click "Next".
3.The image file will be mounted as a shared folder of the NAS. Enter the folder name.
4.Specify the access rights of the NAS users or user groups to the shared folder. You can also select "Deny Access" or "Read only" for the guest access right. Click "Next".
5.Confirm the settings and click "Next".
6.Click "Finish".
7.After mounting the image file, you can specify the access rights of the users over different network protocols such as SMB, AFP, NFS, and WebDAV by clicking the Access Permission icon in the "Action" column.


The NAS supports mounting ISO image files by the File Station. Please refer to the chapter on File Station for details.



For ARM based NAS models, Cyrillic characters are not supported for the name of a subfolder in an ISO shared folder (the name will not be correctly displayed if that subfolder is created with a Cyrillic name.) Please name the subfolder with a different language before an ISO file is created.
For Mac OSX, mounting a folder that contains the # character in the folder name through WebDAV is not supported. Please rename the folder before mounting it if necessary.  


Folder Aggregation


You can aggregate the shared folders on Microsoft network as a portal folder on the NAS and let the NAS users access the folders through your NAS. Up to 10 folders can be linked to a portal folder. To use this function, follow the steps below:

1.Enable folder aggregation.
2.Click "Create A Portal Folder".
3.Enter the portal folder name. Select to hide the folder or not, and enter an optional comment for the portal folder.
4.Click the "Link Configuration" button under "Action"  and enter the remote folder settings. Make sure the folders are open for public access.
5.Upon successful connection, you can connect to the remote folders through the NAS.



Folder Aggregation is supported only in Microsoft networking service and recommended for a Windows AD environment.
If there is permission control on the folders, you need to join the NAS and the remote servers to the same AD domain.


Advanced Permissions

"Advanced Folder Permissions" and "Windows ACL" provide subfolder and file level permissions control. They can be enabled independently or together.




How to Configure

Advanced Folder Permissions

FTP, AFP, File Station, Samba

3 (Read, Read & Write, Deny)

NAS web UI

Windows ACL


13 (NTFS permissions)

Windows File Explorer


FTP, AFP, File Station, Samba

Please see the application note (http://www.qnap.com/index.php?lang=en&sn=4686) for more details.

Windows File Explorer


Advanced Folder Permissions

Use "Advanced Folder Permissions" to configure subfolder permissions directly from the NAS UI. There is no depth limitation for the subfolder permissions. However, it is highly recommended to change the permissions only on the first or second level of the subfolders. When "Advanced Folder Permissions" is enabled, click the "Folder Permissions" button under the "Shared Folders" tab to configure the subfolder permission settings. See Shared Folders" > "Folder Permission of this section for details.


Windows ACL

Use "Windows ACL" to configure the subfolder and file level permissions from Windows File Explorer. All Windows Permissions are supported. For detailed Windows ACL behavior, please refer to standard NTFS permissions: http://www.ntfs.com/#ntfs_permiss

To assign subfolder and file permissions to a user or a user group, full control share-level permissions must be granted to the user or user group.
When Windows ACL is enabled while "Advanced Folder Permissions" are disabled, subfolder and file permissions will have effect only when accessing the NAS from Windows File Explorer. Users connecting to the NAS via FTP, AFP, or File Station will only have share-level permissions.
When Windows ACL and Advanced Folder Permissions are both enabled, users cannot configure Advanced Folder Permissions from the NAS UI. The permissions (Read only, Read/Write, and Deny) of Advanced Folder Permissions for AFP, File Station, and FTP will automatically follow Windows ACL configuration.


© 2015 QNAP Systems, Inc. All Rights Reserved.