How to set up Minimum Permissions required to join SoftNAS to AD

In order to join your SoftNAS instance to Active Directory, you must first create a user with adequate permissions to perform the task. 

Method 1:

You can create a domain user with the appropriate credentials by creating a domain user, and adding it to the default group found in Windows Server domains called Account Operators. This group carries and provides its users with all the required permissions.

Method 2:

An alternative method is to assign the rights to the domain user or group by using the Default Domain Group policy. To assign the appropriate rights, follow the below steps: 

1. Login to the domain controller and launch the Group Policy Management console.
   
   
2. Right-click the Default Domain Policy and click Edit.
   
   
   
   
3. Navigate through Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Expand User Rights Assignment. On the right hand side double-click Add workstations to Domain policy.
   
   
   
   
4. Check the box Define these policy settings. Click Add User or Group and select the user or group. Click Apply and OK.
   Next, it is a good idea to also set up permissions using AD Users and Computers.
   
   
5. Open the Active Directory Users and Computers snap-in. Right-click the container under which you want the computers to be added (for example, the Computers container) and click on Delegate Control.
   
   
6. You will now see the Delegation of Control Wizard. Click Next.
   
   
7. To add a user or group click Add. Once you are done click Next.
   
   
   
   
8. In Tasks to Delegate,  click Create a custom task to delegate. Click Next.
   
   
   
   
9. Choose Only the following objects in the folder and check the box Computer Objects.  Click Next.
   
   
    
10. In Permissions, check the Property-specific check-box and select Read userPrincipalName and Write userPrincipalName in the Permissions section.
    
    
     
11. Click Finish.