White Papers

DR Series Best Practice Guide
6
Password Reset
The DR appliance has the ability to allow the administrator to reset the administrator password. To
ensure security, administrators should setup password reset immediately. This ensures that in the
future if the admin password is forgotten it can be securely reset.
Joining the domain
If the DR is to be joined to an Active Directory domain it is recommend that this action is performed
from the start. Doing so will allow ACLs to be applied and domain users can be used to access the
data from the backup application.
Adding the DR to Active Directory
Logon to the DR GUI, Click on Active Directory in the side panel, click on join in the upper right hand
corner and enter in the name of the domain and credentials to add the DR to the domain.
It will now be possible to logon to the DR appliance using the GUI\CLI via Domain\user for any users
that are in the global group.
To allow multiple groups to logon to the DR appliance using Active Directory do the following:
1. Create a new global group in Active Directory
2. Add each group to be allowed to access DR product to this global group.
3. Add the new global group to the DR using the following command from the CLI:
authenticate --add --login_group “domain\group”
Users that are part of the selected AD group will be able to logon to the CLI and GUI to administer the
device.
Setting ACLs and inheritance
It is best to set ACLs and inheritance when the system is first setup. By default, every user has access to
all data. Attempting to change permissions and inheritance later is very time consuming.
Set Time
If the DR is not joined to an Active Directory domain, it is best to configure the DR to use NTP. If the
DR is joined to an Active Directory, it will automatically sync its time.
Container Creation
The DR appliance uses containers to store backup data. These containers are segmented folders that
have individual protocols, security permissions, marker types and connection types. Whatever number
of containers are created, the DR Series deduplicates across all containers.
Below are considerations to take into account when creating containers:
1. Depending on what model of DR appliance is being used, there is a maximum limit to the
number of containers that can be created. Refer to the DR Interoperability Matrix for maximum
container limits.
2. Access protocols are set at a container level (NFS, CIFS, OST, RDS, iSCSI, NDMP)
3. Security is set at a container level (Locking down Via IP, Unix/Windows ACLs, etc.)