Mapping a folder on Synology NAS to all Authenticated Users W2K12 EssentialsUseful Command-line Commands on WindowsWhy does removing the EVERYONE group prevent domain admins from accessing a drive?Windows NTFS Permissions replacing child objects bulkRsync: windows 7, synology: login error and permission denied errorSynology - How to grant terminal access to a user without adding them to administrator group?Server 2008 R2 - NAS for file storageFTP Error 530 when using FTP User Isolation on IIS 8User Group folder access 2012 essentialsFilter Folder Redirection GPO with Authenticated UsersWindows Server 2016 Essentials folder permissions
Why was this character made Grand Maester?
What are Antecedent & Consequent Phrases in Music?
Take elements from a list based on two criteria
Are black holes spherical during merger?
Count all vowels in string
Time complexity of an algorithm: Is it important to state the base of the logarithm?
Find this cartoon
Is it legal to have an abortion in another state or abroad?
Must a warlock replace spells with new spells of exactly their Pact Magic spell slot level?
Determine this limit
Can a person survive on blood in place of water?
Can my floppy disk still work without a shutter spring?
Natural Armour and Weapons
Is this statement about cut time correct?
Is my plasma cannon concept viable?
How did NASA Langley end up with the first 737?
Are there any German nonsense poems (Jabberwocky)?
Why does the hash of infinity have the digits of π?
Nuke it from orbit - surely can only mean bin and buy replacement?
Is there any relationship between frequency of signal and distance it travels?
How can I make an argument that my time is valuable?
Where is Jon going?
Best material to absorb as much light as possible
Is superuser the same as root?
Mapping a folder on Synology NAS to all Authenticated Users W2K12 Essentials
Useful Command-line Commands on WindowsWhy does removing the EVERYONE group prevent domain admins from accessing a drive?Windows NTFS Permissions replacing child objects bulkRsync: windows 7, synology: login error and permission denied errorSynology - How to grant terminal access to a user without adding them to administrator group?Server 2008 R2 - NAS for file storageFTP Error 530 when using FTP User Isolation on IIS 8User Group folder access 2012 essentialsFilter Folder Redirection GPO with Authenticated UsersWindows Server 2016 Essentials folder permissions
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
We have a W2k12 essentials server with about 10 users on it. I want to add a group policy to map to a folder on our Synology NAS drive. I believe I'm having a permissions issue, but not sure. I added the drive map in GPE and targeted it to Authenticated Users.
I tried to add permissions for 'Authenticated Users' on the folder DISKSTATION2homessage2 but got an error about failing to enumerate objects in the folder. I don't want to switch ownership for fear of breaking the permissions on the Synology. Right now, we add a user to the server, and then add the user to the Synology as a USER. All Synology USERs can access the company folder and their home folder. We then map a drive for each user on their machine, but we'd like to transition to doing it through the server and group policy.
windows windows-server-2012-r2 network-attached-storage synology windows-server-essentials
add a comment |
We have a W2k12 essentials server with about 10 users on it. I want to add a group policy to map to a folder on our Synology NAS drive. I believe I'm having a permissions issue, but not sure. I added the drive map in GPE and targeted it to Authenticated Users.
I tried to add permissions for 'Authenticated Users' on the folder DISKSTATION2homessage2 but got an error about failing to enumerate objects in the folder. I don't want to switch ownership for fear of breaking the permissions on the Synology. Right now, we add a user to the server, and then add the user to the Synology as a USER. All Synology USERs can access the company folder and their home folder. We then map a drive for each user on their machine, but we'd like to transition to doing it through the server and group policy.
windows windows-server-2012-r2 network-attached-storage synology windows-server-essentials
add a comment |
We have a W2k12 essentials server with about 10 users on it. I want to add a group policy to map to a folder on our Synology NAS drive. I believe I'm having a permissions issue, but not sure. I added the drive map in GPE and targeted it to Authenticated Users.
I tried to add permissions for 'Authenticated Users' on the folder DISKSTATION2homessage2 but got an error about failing to enumerate objects in the folder. I don't want to switch ownership for fear of breaking the permissions on the Synology. Right now, we add a user to the server, and then add the user to the Synology as a USER. All Synology USERs can access the company folder and their home folder. We then map a drive for each user on their machine, but we'd like to transition to doing it through the server and group policy.
windows windows-server-2012-r2 network-attached-storage synology windows-server-essentials
We have a W2k12 essentials server with about 10 users on it. I want to add a group policy to map to a folder on our Synology NAS drive. I believe I'm having a permissions issue, but not sure. I added the drive map in GPE and targeted it to Authenticated Users.
I tried to add permissions for 'Authenticated Users' on the folder DISKSTATION2homessage2 but got an error about failing to enumerate objects in the folder. I don't want to switch ownership for fear of breaking the permissions on the Synology. Right now, we add a user to the server, and then add the user to the Synology as a USER. All Synology USERs can access the company folder and their home folder. We then map a drive for each user on their machine, but we'd like to transition to doing it through the server and group policy.
windows windows-server-2012-r2 network-attached-storage synology windows-server-essentials
windows windows-server-2012-r2 network-attached-storage synology windows-server-essentials
asked Nov 27 '18 at 14:57
SteveSteve
1093
1093
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
I have found that item-level targeting will not work with the SID populated. There is a bug in AD DS that will not allow this to work unless you type in the group name only. Do not click the '...', just type in the group name that you want to target.
Very useful article here. This article helped me out with this same question.
add a comment |
Based on your screenshots, your GPO is not linked anywhere.
You just created the GPO in the Active Directory but you have to link it on the OU containing your AD users.
Additionnally, in the Item Level Targeting, you should remove "Domain Users", since almost everyone is a Domain User, I don't think it's meaningful to filter on this group. However, if you really want to keep this targeting rule, you have to check "Primary Group" since "Domain Users" is probably the primary group of your users.
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f941835%2fmapping-a-folder-on-synology-nas-to-all-authenticated-users-w2k12-essentials%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
I have found that item-level targeting will not work with the SID populated. There is a bug in AD DS that will not allow this to work unless you type in the group name only. Do not click the '...', just type in the group name that you want to target.
Very useful article here. This article helped me out with this same question.
add a comment |
I have found that item-level targeting will not work with the SID populated. There is a bug in AD DS that will not allow this to work unless you type in the group name only. Do not click the '...', just type in the group name that you want to target.
Very useful article here. This article helped me out with this same question.
add a comment |
I have found that item-level targeting will not work with the SID populated. There is a bug in AD DS that will not allow this to work unless you type in the group name only. Do not click the '...', just type in the group name that you want to target.
Very useful article here. This article helped me out with this same question.
I have found that item-level targeting will not work with the SID populated. There is a bug in AD DS that will not allow this to work unless you type in the group name only. Do not click the '...', just type in the group name that you want to target.
Very useful article here. This article helped me out with this same question.
answered May 10 at 22:50
Daniel VoylesDaniel Voyles
212
212
add a comment |
add a comment |
Based on your screenshots, your GPO is not linked anywhere.
You just created the GPO in the Active Directory but you have to link it on the OU containing your AD users.
Additionnally, in the Item Level Targeting, you should remove "Domain Users", since almost everyone is a Domain User, I don't think it's meaningful to filter on this group. However, if you really want to keep this targeting rule, you have to check "Primary Group" since "Domain Users" is probably the primary group of your users.
add a comment |
Based on your screenshots, your GPO is not linked anywhere.
You just created the GPO in the Active Directory but you have to link it on the OU containing your AD users.
Additionnally, in the Item Level Targeting, you should remove "Domain Users", since almost everyone is a Domain User, I don't think it's meaningful to filter on this group. However, if you really want to keep this targeting rule, you have to check "Primary Group" since "Domain Users" is probably the primary group of your users.
add a comment |
Based on your screenshots, your GPO is not linked anywhere.
You just created the GPO in the Active Directory but you have to link it on the OU containing your AD users.
Additionnally, in the Item Level Targeting, you should remove "Domain Users", since almost everyone is a Domain User, I don't think it's meaningful to filter on this group. However, if you really want to keep this targeting rule, you have to check "Primary Group" since "Domain Users" is probably the primary group of your users.
Based on your screenshots, your GPO is not linked anywhere.
You just created the GPO in the Active Directory but you have to link it on the OU containing your AD users.
Additionnally, in the Item Level Targeting, you should remove "Domain Users", since almost everyone is a Domain User, I don't think it's meaningful to filter on this group. However, if you really want to keep this targeting rule, you have to check "Primary Group" since "Domain Users" is probably the primary group of your users.
answered Dec 26 '18 at 12:33
SwisstoneSwisstone
2,47111020
2,47111020
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f941835%2fmapping-a-folder-on-synology-nas-to-all-authenticated-users-w2k12-essentials%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown