Local Admins

For a NAS server joined to Active Directory, local admins are the Active Directory users or groups granted local administrative rights over the NAS server itself — for example, the ability to manage SMB share permissions from a Windows client using the "Computer Management" MMC snap-in, without being a full domain administrator. This is only relevant to NAS servers using Active Directory; it doesn't apply to Workgroup-mode SMB.

The built-in Domain Admins group is always a local admin and can't be added or removed through these commands.

Listing local admins

Using the web interface

Open Application Volumes > NAS Servers > Local Admins to see every user/group currently granted local admin rights.

Using the CLI

nas_servers active_directory local_admins list

This command takes no options.

Example

nas_servers active_directory local_admins list

Adding a local admin

Using the web interface

1. Open Application Volumes > NAS Servers > Local Admins and choose Add.
2. Enter the Active Directory user or group name.
3. Confirm to add it.

Using the CLI

nas_servers active_directory local_admins add --name=<domain_user>

Option	Description
--name=<domain_user>	The name of the Active Directory user or group to add as a local admin.

Example

nas_servers active_directory local_admins add --name "CORP\backup-operators"

Deleting a local admin

Using the web interface

1. Open Application Volumes > NAS Servers > Local Admins, select the entry, and choose Delete.
2. Confirm the deletion.

Using the CLI

nas_servers active_directory local_admins delete --name=<domain_user> [--force]

Option	Description
--name=<domain_user>	The name of the local admin to delete.
--force	Skip the confirmation prompt.

Example

nas_servers active_directory local_admins delete --name "CORP\backup-operators"

---

See also: NAS Servers