User & Group Management; Overview; Domain Versus Workgroup Environments - Tandberg Data NAS Hardware Viking FS-1500 Administration Manual

5.
__________________________________________________________________________________________________
User & Group Management
5.1.

Overview

There are two system environments for users and groups: workgroup and
domain. Because users and groups in a domain environment are managed
through standard Windows or Active Directory domain administration
methods, this document discusses only local users and groups, which are
stored and managed on the NAS appliance. For information on managing
users and groups on a domain, refer to the domain documentation available
on the Microsoft website.
5.2.

Domain versus Workgroup Environments

There are two system environments for users and groups: workgroup and
domain. Because users and groups
NAS appliances can be deployed in workgroup or domain environments.
When in a domain environment, the appliance is a member of the domain.
The domain controller is a repository of accounts and account access for the
NAS appliance. Client machines are also members of the domain, and users
log on to the domain through their Windows clients. The domain controller
also administers user accounts and appropriate access levels to resources
that are a part of the domain.
In a CIFS/SMB environment, when mapping a network drive or a client
machine, a user sends a logon credential to the NAS appliance. This
credential includes the username, password, and if appropriate, domain
information. Using the credential, the NAS appliance authenticates and
provides the corresponding access to the user.
When a NAS appliance is deployed into a workgroup environment, all user
and group account access permissions to file resources are stored locally on
the appliance.
In contrast, when a NAS appliance is deployed into a domain environment it
uses the account database from the domain controller, with user and group
accounts stored outside the appliance. The NAS appliance integrates with
the domain controller infrastructure.
Note
The NAS appliance cannot act as a domain controller for other servers on the
network. If user and group account information is stored locally, those accounts may
be used only to authenticate logons to the NAS appliance, resulting in a workgroup
configuration.
5-1 Tandberg Viking Series Storage Server Administration Manual