Synology IT support service is provided by our consultants both on-site and remotely.   We consult on more advance configurations. Here’s a scratch guide for a variety of random stumbling blocks to setup the Synology along with some well written resource links to get you started or contact us for on-site technical support today!

Quick Link Resources:

 

What Type of Organization requires Synology IT Support?

We found that most residential users use the Synology for photo and video archiving.   Businesses ranging from 2 to 20 use shared folder, map drive, and Synology Drive.   We have introduced many to imaging and cloud backups of email and file storage.  Biotech firms are fond of the NAS appliance box for taking snapshots of their lab equipment (see Active Backup Setup) that can be expensive to upgrade when there are OS version of updates.

It gets really interesting how the 20 users on up.  Lots of creative departments add it with limited knowledge of maintaining it long term or they hit a wall on scalability.   File distributions that lean on Azure and on-premise traditional server environment are some additional common uses we run into.

 

Recommended Synology’s NAS – Under 20 UsersSynology IT Support

The DiskStation 2 Bay and latest year is ideal for residential or micro business.  DS224+   Make sure it’s the plus series.  The drive must be compatible and they are always sold separately.

For Home or Micro Business

 

Lab Department Imaging or 10 Computers Active Backup Imaging & Rackmount Solutions

– Department or Lab Instruments related Imaging of Workstations

NOTE: Do not forget the hard drives.  4TB drives are good for the basics but you may need a substantially bigger drive depending on how well you are managing your data, your backup and imaging of other workstations 0r lab equipment in particular

Creative Department & Rackmount Solutions

– The Creative or Marketing department has way too many variables for us to provide a link. Contact our Synology IT support team and we will be perform discovery, pricing, configuration, and deployment.

 

How much space, processing power, and redundancy do you need?

Talk to a network consultant, our Synology IT support team, or Synology sales but a nifty little RAID calculator and NAS configurator will help with your decision.   Do not forget processing power and memory as key factors in your Synology purchasing decision.  For instance, an individual utilizing this for home running Plex and or surveillance requires a + series processor.  The 2 bay illustrated above will be fine for that.  It becomes questionable if utilize the Synology NAS for performing virtualization.  At the very least, upgrade the RAM but the 2 bay (DS218+) becomes questionable beyond one virtual OS.  The more robust 4 bay, more storage options, more processing power becomes the more fancy option.  However, the 2 bay should be fine for most budget concerned individuals.

 

Are you not receiving the basic Synology IT support necessary to install the hard drives?


Discovering your Diskstation on the Network  (After Synology has arrived and powered up for the first time)

Go to http://find.synology.com for discovering the device and initiating setup.

ProTip! Sometimes the URL above does not work because your firewall maybe prohibit it from scanning your network.  Use Synology Assistant or  some LAN scan tool instead.

Initial Setup Defaults include:

  • Create user admin account that is not “admin” and possibly a backup admin account to that. IMPORTANT: Disable “admin” for security purposes
  • No share folders on setup on the volume unless default packages are installed

 

Required Packages for Media and Syncing

  • Videos Station – Installs “video” share folder containing home video, TV shows, and movies.  *Create a service account called “media” if you plan to install this.  The service account will be used for network devices that will connect to the Synology.
  • Cloud Station – Creates file and folder sync. It requires you enable “user home folder” service.
    *To enable user home service, go to Control Panel > User > Advanced, and tick the box next to Enable user home service.
    *Click here to learn more about restoring previous files with CloudStation

    NOTE:  CloudStation is a legacy application.  See Synology Drive in the Table of Contents at the top for more in depth posts.

Creating Users

  • Add two administrator accounts as a CYA measure and disable the default admin.  Otherwise, you will need a pin to reset the admin credentials.
  • When adding users, do not assign to groups, shared folders, and applications unless they are already setup.
  • Drop “everyone” from folder permissions of user’s “homes” folder if you run into a configuration issue
Synology IT Support in San Diego

Synology Group Setup

Pro Synology IT Support Tip!!

***The admin account has a strong possibility of getting hacked as you enable more remote services. Please limit your remote services and create additional admin accounts as a backdoor. Two Factor authentication will also help secure each account but reduce ease of use for the end users.

Groups

  • Groups are not assigned to shared folders upon initial setup because shares should not be present.  Same goes for Applications.
  • Once groups are set, add new users to place in the corresponding groups.  Administrators will need permissions to access Group folders.
  • Go back to “users” to add to the correct “groups”

Folders

Enable user homes service to create a personal home folder for each user, except for guest. All users can access their own home folder via CIFS, AFP, FTP, or File Station.

Users belonging to the administrators group can access all personal folders located in the homes default shared folder. The name of home folder is the same as the user account.

To enable the user home service:

  1. Check Enable user home service.
    *Users, advance tab… 2-step verification located there too.  It’s great security but annoying and sometime unreliable login process.
  2. If there are multiple volumes, select where you want the homes folder to be stored.
  3. Click Apply.

Additional Folder created:

  • Homes – Personal user home folder
  • Home – It’s a link to the user homes folder. Do not give readable permissions for users to “homes”

*The User Home feature automatically creates a “home” folder for every user account (except “guest”), which not only provides each user with a private space to store data that is only accessible by the user and DSM administrators, but also eliminates the time and efforts spent in repeatedly creating “home” folders for all accounts.  More folders are created under each user name as more services are installed that require personal access.

Synology ServicesDocuments folder is added for windows folder redirection.  This works well in a desktop environment but can be a mess in a laptop environment.  Microsoft Folder Sync in a workgroup environment does not help the remote cause just simply adds more frustration.

 

Remote Accessibility and The Most Secure Options

There several options for your users and the synology IT support team can connect remotely:

1) https://custom_DSM_name.synology.me:5001
3) https://QuickConnectID  ***not recommended
4) https://custom_DSM_name.your_domain_name.com
5) VPN

Three is the easiest but does not secure your data completely.  Four is pretty secure and intuitive naming convention if you purchase the third party SSL mentioned above.  Five is the most secure but kills the use of the DiskStation mobile apps.   I would explore Ubiquiti VPN setup with the Dream Machine Pro if you want more security.

 

In this case, look into integrating Box app with Synology Cloud Sync.  2) Is the free and relatively secure option.  The web browser still prompts you with that scary “this server is not secure” message but otherwise you are good to go.  It doesn’t confirm with a third party database saying this is indeed the server you should be talking to and not some crazy man in the middle attack.  View our TOC IT Support related links at the top to better understand your securing your sessions with SSL certs.

  • Enable services like DynDNS or Synology.me in control panel, external access, DDNS.
  • DSM – Disk Station Manager – Allows users to remote in on their desktops from a remote locationQuickConnect:

QuickConnect is the alternative to DDNS access.  It comes in handy when you don’t have access to the router GUI admin console.  Register QuickConnect ID. Quickconnect is essential service for avoiding poking holes in the firewall. ***Please Note***
QuickConnect is not encrypted. Sensitive data could be exposed.  Bottom line.  I prefer DDNS or a static WAN IP situation.

Enabling QuickConnect triggers the following services active:

  • Cloud Station and DS Cloud
    • NOTE:  Cloud Station is a legacy app.  View Synology Drive in the table of contents at the top of page for the latest setup.
  • Mobile Applications accessibility

Cloud Station – Enable Basic Features

Generally users can and should have access to the application called “Cloud Station Server” unless you really don’t trust them.  In that case, terminate the user.

synology it support

Cloud Station – Shared Folders Syncing

  • Privileges – Services Account enabled. Deem one user account for Cloud Station purposes.
    *change to read/write for service account
  • Folders – Share and sync specific folders (see picture below) to be shared amongst Synology devices

Note:  Check package service is running.  Stop and Start if backup is failing.   Cloudstation service does not appear after install.  It requires reboot. Files on the diskstation are located /homes/username1/cloudstation

Cloud Station

Cloud Station

Cloud Station Drive

Make sure you enable the group or user for access Cloud Station access to the shared folder.  Go confirm if you checked the users application privileges within Control Panel > User > UserName > Edit > Applications and make sure the user has privileges to the Cloud Station Server application

synology IT support

Share and Drive Mappings

Create shares not NFS files and folders unless necessary.

  • Share data or contents shouldn’t be revealed unless authenticated \\diskstation
  • User home folder appears under \\diskstation\home (windows) if authenticated with that user and is a link from path /homes/user_names on Synology
  • \\DISKSTATION\home

-Remove credentials in windows manager

-From command line, check net view

-From command line, check net use. Net use * /delete to remove legacy network connections

  • Map below after all old network connections have been removed. Diskstation_name\user_name

Backup Options  ***Complete command line instructions and http authorization

Hyper Backup – Definitely Recommended

Synology Cloud Hyper Backup – Recommended

  • Use Synology C2 for backing up to the cloud.

Crashplan and Synology Backup – Not recommended

iDrive Backup – Synology iDrive App – Not recommended

If you have logged in to the System as a different user other than Admin, you could face this issue. You should go to vi /etc/passwd file, change /sbin/nologin to /bin/sh corresponding to your username, and then refresh the application browser. Read more or reference below…

Security Quick sheet

  • Disable the default admin account permanently
  • Enable 2 factor authentication
  • Enable HTTPS and Redirect HTTP
  • Enable DOS attack protection
  • Enable port forwarding – portforward.com
    Note: Change external port # for increased anonymity of the port service

Remote Access Security

Synology remote access requires a key component called a SSL certificate for securing your data.  Webpage warnings can be avoided by adding the domain as a security exception, allowing you to access DSM normally.

 

More Packages 

Surveillance Station *Service won’t work unless ports are open.  Surveillance Station is a web-based application that can manage IP cameras to safeguard your home or office environment.    It can watch and record live view videos, schedule,  and playback.

Cloudstation Sync for Windows and Mac *Service won’t work unless ports are open

  • Enable TCP port 6690.  DDNS will work properly once enabled.

PhotoStation *Service won’t work unless ports are open

  • General, Enable personal photo station service under admin and select HTTPS Redirect
  • Enable Person photo Station server under options of DSM for regular user account (this creates \home\photo folder for that particular user
  • Add https web services and certificate

Purchase below and contact Network Synology IT support today!!

 

Avoid costly visits from your Synology IT Support team.  Get a battery backup and grab insurance for your network.  Subscribe to Managed IT Service Agreement.

 

Alternatively, purchase DS1522+ good for 25 user/10 designer environment.  This option will help defer future Synology IT Support projects.  It scales well for next 5 years at a rate of TB a year.

 

Bonus Resources

Leave A Comment