Adaptec 5325301656 Administration Guide - Page 41

Windows Networking Configuration still see these shares. To completely hide shares from visibility from any protocols, the Security > Shares screen gives you access to a separate and distinct Hidden share option that hides a share from SMB, AFP, HTTP, HTTPS, and FTP clients (However, shares are not hidden from NFS clients, which cannot connect to shares that aren't visible. To hide shares from NFS clients, consider disabling NFS access on hidden shares). For new shares, select New and click the Advanced button to access the Hidden share option. For existing shares, select the share, click Properties, and click Advanced to access the Hidden share option. Support for Windows Network Authentication This section summarizes important facts regarding the GuardianOS implementation of Windows network authentication. Windows Networking Options Windows networks use a domain controller to store user credentials. The domain controller can validate all authentication requests on behalf of other systems in the domain. Option Workgroup Domain (NT or ADS) Description In a workgroup environment, users and groups are stored and managed separately on each server in the workgroup. When operating in a Windows NT or Active Directory domain environment, the Snap Server is a member of the domain and the domain controller is the repository of all account information. Client machines are also members of the domain and users log into the domain through their Windows-based client machines. Windows or Active Directory domains resolve user authentication and group membership through the domain controller. Once joined to a Windows NT or Active Directory domain, the Snap Server imports and then maintains a current list of the users and groups on the domain. Thus, you must use the domain controller to make modifications to user or group accounts. Changes you make on the domain controller appear automatically on the Snap Server. Kerberos Authentication Kerberos is a secure method for authenticating a request for a service in a network. Kerberos lets a user request an encrypted "ticket" from an authentication process that can then be used to request a service from a server. The user credentials are always encrypted before they are transmitted over the network. The Snap Server supports the Microsoft Windows implementation of Kerberos. In Windows Active Directory (ADS), the domain controller is also the directory server, Chapter 2 Network Access to the Server 27