QNAP

QTS 5.0.x

Configuring Samba (Microsoft Networking) Settings

Microsoft Networking refers to Samba, a network protocol that allows data to be accessed over a computer network and provides file and print services to Windows clients.

  1. Go to Control Panel > Network & File Services > Win/Mac/NFS/WebDAV > Microsoft Networking.
  2. Select Enable file service for Microsoft networking.
  3. Configure Microsoft networking settings.

    Setting

    User Action

    Server description (Optional)

    Specify a description that contains a maximum of 256 characters. The description should enable users to easily identify the NAS on a Microsoft network.

    Workgroup

    Specify a workgroup name that contains 1 to 15 characters from any of the following groups:

    • Letters: A to Z, a to z

    • Numbers: 0 to 9

    • Multi-byte characters: Chinese, Japanese, Korean, and Russian

    • Special characters: ~ ! @ # $ ^ & ( ) - _ { } . '

  4. Select an authentication method.

    Option

    Description

    Standalone server

    QTS uses the local user account information for authentication.

    AD domain member

    QTS uses Microsoft Active Directory (AD) for authentication.

    LDAP domain authentication

    QTS uses an LDAP directory for authentication.

  5. Configure the advanced settings.
    1. Click Advanced Options.

      The Advanced Options window opens.

    2. Configure the advanced settings.
    3. Configure any of the following settings.

      Option

      User Action

      Enable WINS server

      Select to run a WINS server on the NAS.

      Use the specified WINS server

      Select to specify a WINS server IP address that QTS will use for name resolution.

      Local master browser

      Select to use the NAS as a local master browser. A local master browser is responsible for maintaining the list of devices in a specific workgroup on a Microsoft network.

      Important:

      To use the NAS as local master browser, specify the workgroup name when configuring Microsoft networking. The default workgroup in Windows is "workgroup".

      Allow only NTLMSSP authentication

      Select to authenticate clients using only NT LAN Manager Security Support Provider.

      When this option is deselected, QTS uses NT LAN Manager (NTLM).

      Name resolve priority

      Select a name service to use for name resolution.

      The default service is DNS only.

      If a WINS server is specified, Try WINS then DNS is selected by default.

      Alternative login style

      Select to change how usernames are structured when accessing FTP, AFP, or File Station services.

      After selecting this option, users can access NAS services using Domain\Username, instead of Domain+Username.

      Automatically register in DNS

      Select to register the NAS on the DNS server. If the NAS IP address changes, the NAS automatically updates the IP address on the DNS server.

      This option is only available if AD authentication is enabled.

      Enable trusted domains

      Select to join users from trusted AD domains.

      This option is only available if AD authentication is enabled.

      Enable Asynchronous I/O

      Select to improve the Samba performance using asynchronous I/O.

      Asynchronous I/O refers to the I/O behavior on the CIFS protocol layer. This is different from the synchronous I/O feature found in the shared folder settings, which only applies to specific shared folders on the file system level.

      Tip:

      To prevent power interruption, use a UPS when asynchronous I/O is enabled.

      Enable WS-Discovery to help SMB clients discover the NAS

      Select to enable Web Services Dynamic Discovery (WS-Discovery). WS-Discovery makes the NAS visible in File Explorer on Windows 10 computers.

      Highest SMB version

      Select the highest SMB protocol version used in your networking operation.

      Use the default SMB version if you are unsure about this setting.

      Note:

      Selecting SMB3 will also include SMB 3.1 and SMB 3.1.1.

      Lowest SMB version

      Select the lowest SMB protocol version used in your networking operation.

      Use the default SMB version if you are unsure about this setting.

      Note:

      Selecting SMB 3 will also include SMB 3.1 and SMB 3.1.1.

      Enable kernel-mode SMB daemon

      Select to increase read/write performance.

      Important:

      Enabling this option disables SMB encryption for shared folders.

      Allow Symbolic links within a shared folder

      Select to allow symbolic links within shared folders.

      Important:

      You must enable this setting in order to restore files from snapshots on Windows using Windows Previous Versions. For details, see Snapshot Data Recovery.

      Allow Symbolic links between different shared folders

      Select to allow symbolic links between shared folders.

      Note:

      This setting requires Allow Symbolic links within a shared folder to be selected first.

      Restrict anonymous users from accessing SMB shared folders

      Select to enable user login before accessing SMB shared folders.

      Note:

      This setting will be locked to Enabled (strict) if ABSE is enabled on any shared folder.

      Veto files

      Enable to hide files from users accessing the NAS via SMB. Files are hidden if their filename matches a pattern in the veto criteria file.

      Veto criteria

      Specify filename criteria for hiding files from SMB NAS users.

      Note:

      This option is only available when Veto files is selected.

      Server signing

      Select the security signature option to secure message transmissions and prevent relay attacks.

      • Optional

      • Required

      • Optional for SMBv2 and SMBv3

    4. Click Apply.

      The Advanced Options window closes.

  6. Click Apply.

Network & File Services saves the Samba settings.