2big NAS User Manual 113
Active Directory / Domain Side
On the Active Directory / domain side, the following points should be checked by the Active Directory
administrator, as configuration is different for every customer.
Ask the AD administrator to verify if Kerberos Server & Time Server are registered in the domain DNS, in1.
order to allow the LaCie product to connect. Kerberos Server & Time Server need to be accessible to the
LaCie product, as these servers are involved in the joining process.
Check the machine name object in AD. Check that it's placed in the right container (not the default2.
“computer” container) and check access rights for the machine name (such as who can log on to it). You may
also need to delete the machine name in order to reset the object in AD.
It may be necessary for the domain administrator to create a computer account in AD in the right container
prior to joining the LaCie product in the domain (with the computer account name being the product's
machine name).
There may be an issue when joining a domain if a sub-domain has been set up. The question to ask is3.
whether the domain joining was done using the correct domain/sub-domain name. (Again, check the machine
name object location/rights in AD). Could the user belong to a different sub-domain not authorized to access
the product?
Note: If the LaCie product fails to connect to a properly configured AD, you should provide LaCie technical
support with the domain network configuration log from the Dashboard - Support page for analysis.
To Next Page