In order to join your SoftNAS instance to Active Directory, you must first create a user with adequate permissions to perform the task.
Method 1:
You can create a domain user with the appropriate credentials by creating a domain user, and adding it to the default group found in Windows Server domains called Account Operators. This group carries and provides its users with all the required permissions.
Method 2:
An alternative method is to assign the rights to the domain user or group by using the Default Domain Group policy. To assign the appropriate rights, follow the below steps:
- Login to the domain controller and launch the Group Policy Management console.
- Right-click the Default Domain Policy and click Edit.
- Navigate through Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Expand User Rights Assignment. On the right hand side double-click Add workstations to Domain policy.
- Check the box Define these policy settings. Click Add User or Group and select the user or group. Click Apply and OK.
- Next, it is a good idea to also set up permissions using AD Users and Computers.
- Open the Active Directory Users and Computers snap-in. Right-click the container under which you want the computers to be added (for example, the Computers container) and click on Delegate Control.
- You will now see the Delegation of Control Wizard. Click Next.
- To add a user or group click Add. Once you are done click Next.
- In Tasks to Delegate, click Create a custom task to delegate. Click Next.
- Choose Only the following objects in the folder and check the box Computer Objects. Click Next
- In Permissions, check the Property-specific check-box and select Read userPrincipalName and Write userPrincipalName in the Permissions section.
- Click Finish.
