Knowledge Base

Search by either entering keywords or by selecting a product.

Setting up subfolder permissions on a TS3010/5010/3020/6000 series without AD integretion

Applies to TeraStation 5010/3010/3020 series firmware 4.00 or later
                   TeraStation 6000 series

NOTE: This article demonstrates using the local user/group lists from the TeraStation. For how to use an Active Directory domain for user authentication, follow this article.

1.    First we’ll create a new folder with the correct options to allow subfolder permissions. Open the TeraStation user interface. On the “File Sharing” tab click the widget next to “Folder Setup”.

2.    On the “Shared Folder List” click the “Create Folder” button on the upper left.

3.    Give the new share a name and uncheck every protocol option except SMB. In the example we have also disabled the recycle bin.

4.    Depending on the model, click on the “Option 2” tab or scroll down on the main tab and enable “Access Restrictions for Subfolders”. Once it is enabled, click the “OK” button. If it is grayed out, go back and make sure that only the SMB protocol is enabled for the folder.

5.    The new folder should now appear on the “Shared Folder List”. Click the “Close” button in the lower right.

6.    Same on the “File Sharing” tab click the widget next to “Users”. Make sure to have a User account that you are using to apply the subfolder permissions. For how to create a user account, refer to this KB.

7.    Log into Windows as an administrator (Windows Server 2012R2 in our example). Navigate to the new share.
Note: To make sure we connect to the share using TeraStation admin account instead of the guest account, follow this procedure to Add Windows credentials.

8.    We’ve gone ahead and added a new subfolder named “test”.

9.    Right-click on the subfolder and choose “Properties”.

10.    Click on the “Security” tab, then click the “Advanced” button.

11.    Click the “Add” button.
Note: If we had connected the share using TeraStation’s admin account instead of the guest account, the subfolder Owner will be the TeraStation admin account instead of “nobody”  

12.    Click “Select a principal”

13.    Click the “Advanced” button.

14.    Click the “Find Now” button.

15.    Select the desired TeraStation user/group from the list. Generally, it is preferable to assign rights to a group and add users to the group for simplified administration. Once you have selected the desired user/group, click “OK”.

16.    This dialog box should now show the selected user/group. Click “OK”.

17.    Select the desired permissions from the list. In this case we are just giving “Full Control” permissions for simplicity, but any set of rights can be assigned. Once the desired rights have been selected, click “OK”.

18.    In order to correctly limit the subfolder click the “Disable inheritance”.  

19.    If you are ready to remove inherited permissions, click “Remove all inherited permissions from this object”.

20.    Also make sure you give “Full Control” to the TeraStation admins group or you could lock yourself out of the folder. Follow Step.11 to 17 again to add.
Then click OK.

21.    The correct users/groups should now be listed on the security tab with the new permissions. If you are done editing permissions, click “OK”.

22.    Check if subfolder permissions are working as desired. You can use Windows Credential Manager to assign what TeraStation account to use when connecting to the Share.

If a Shared folder cannot be accessed, try either of the following
•    Adding a TeraStation credential from Windows Credential Manager. Log-out and log-back-in the Windows account to take effect.
•    Configuring the TeraStation to allow you to enter a Windows credential when a shared folder cannot be accessed.



Search keywords: subfolder sub folder 5410 x10 5210 5810 51210 TS5410 TS51210 NTFS permission permissions