User`s guide

Synology DiskStation User's Guide
Based on DSM 4.0
60 Chapter 7: Set Up File Sharing
Allow Domain Users or Groups to Access Shared Folders
If you have joined your DiskStation to a directory service as a Windows domain or LDAP client, you can go to
Main Menu > Control Panel > Directory Service > LDAP User, LDAP Group, Domain users, or Domain
Group to set up and modify the shared folder privileges of a domain/LDAP user or group.
To manage domain/LDAP users or groups' shared folder privileges:
1 Select the user or group you want to edit, and then click Edit.
2 Tick the checkboxes to manage the shared folder privileges. If you are editing the shared folder privileges of a
user, you can see the user's actual privilege under the Preview column.
Note: In the event of privilege conflicts, the privilege priority will be: No access (NA) > Read/Write (RW) > Read
only (RO).
3 Click OK.
Encrypt a Shared Folder
Go to Main Menu > Control Panel > Shared Folder to encrypt your shared folder.
1
The AES 256-bit encryption can block off all unauthorized access attempts. Without the encryption key, other
people will not be able to use the encrypted data even if they remove the hard drives from your Synology
DiskStation and mount it on their device.
To encrypt a shared folder:
1 Select a shared folder you want to encrypt, and then click Edit to open the settings window.
2 Tick Encrypt this shared folder, enter the encryption key in the Encryption key field, and enter the same key
again in the Confirm key field.
3 Choose the size of the AES encryption key from the Encryption key size (bit) drop-down menu.
4 Tick Mount automatically on startup to mount the encrypted folder automatically after Synology DiskStation
starts up next time. By default, encrypted shared folder will be unmounted automatically on startup for security
reasons.
Note:
 You can also encrypt a folder when you create it.
 The following built-in shared folders are not allowed for encryption since they are associated with system services:
web, photo, music, video, surveillance, download, Netbackup.
 Encrypted shared folders cannot be accessed via NFS. If you encrypt a shared folder containing NFS rules, they
will be removed.
Edit an Encrypted Folder
After the folder is encrypted, you can use the Encryption drop-down menu to edit the folder.
The items shown in the menu depend on the status of the selected shared folder:
 For unencrypted shared folder, the Encryption drop-down menu is disabled.
 For an encrypted shared folder which is mounted, you can choose Unmount from the Encryption drop-
down menu to unmount the folder, or Export key to save the encryption key.
 For an encrypted shared folder which is unmounted, you can choose Mount from Encryption drop-down
menu, and then enter or import the encryption key to mount the folder for access.
Note:
 It is very important to remember the encryption key. It is strongly recommended that you export and save the
encryption key. If you forget or lose the key, there is no way to rescue the encrypted data.
 If an encrypted folder is unmounted, you cannot rename it or change its volume location.
---------
1
Shared folder encryption is supported on specific models only.