What type of user security does a NAS have?


We want to get a NAS to centralize storage, but some files need to be private. What type of user security does a NAS have?

Topic: Networking
Answer this Question


3 total
James Gaskin
Vote Up (44)

Every modern NAS appliance includes user security features to allow or restrict file access based on usernames and passwords. Appliances can be completely open so everyone on the network can see every file, completely closed so that each user can see only their files, or a combination of the two.


Commonly, NAS appliances come pre-configured with a volume or folder for shared files, and each user defined in the system also gets a private folder for personal storage. Each user must provide a username and password to gain access to their private folders. No other user can see their private files.


NAS vendors also support Microsoft's Active Directory, so that the NAS appliance can be managed by the more extensive Windows Server security tools. In this case, each user gains access to their private folder area based on their Windows Server username and password. Often, the user doesn't even know their files are stored on a NAS rather than the Windows file server.

Vote Up (38)

James is absolutely right with regard to a traditional NAS set-up.  When looking at a cloud-based NAS – which also support Microsoft’s Active Directory - there are additional concerns surrounding security. In addition to the traditional on-premise security controls, a cloud-based NAS must address the issue of data encryption from on premise all the way through to the cloud. A secure virtual NAS will use AES 256-bit encryption and offer users the ability to manage their own encryption keys.  No one but the key holder can ever access the data so it is effectively crypto-shredded, eg destroyed and inaccessible, without the matching key.

Vote Up (35)

Hi jack45,

Here's an interesting PDF about NAS security issues. You might find it helpful if you are going to use one yourself. It's a pretty good overview.


Ask a question

Join Now or Sign In to ask a question.
Users of Google Glass will get to meet and compare their techie headgear this weekend at a spot where appearance is everything.
A Space X Falcon rocket lifted off Friday afternoon for the International Space Station (ISS) from the Cape Canaveral Air Station in Florida.
Although Exadata is Oracle's most popular and mature "engineered system," some customers implementing the database machine are making mistakes that prevent them from getting the most performance out of the expensive product, according to a veteran of many Exadata projects.
Tech workers suing over an alleged no-poaching agreement among Silicon Valley firms are fighting an attempt by defendants to ban evidence that might portray Steve Jobs as a bad guy.
Vendors will tell you that the Internet of Things (IoT) has arrived. We're here to tell you that it hasn't.
Formula One racing and cryptocurrency have nearly nothing in common -- except Suzuka. The home of the Japanese Grand Prix will soon debut Japan's first bitcoin ATM.
The clock may be running out on Mt. Gox, but a consortium of investors still wants to relaunch the failed Bitcoin exchange.
Alibaba's Tmall and Taobao sites already sell everything from clothes and furniture to car tires and medicines. But soon they'll also be offering 3G data and voice call plans as well, the Chinese e-commerce giant said Thursday.
Google did little during its first-quarter earnings report to shush critics who say its Enterprise unit is a second-class citizen in its kingdom.
Five music labels have filed a lawsuit against streaming music service Pandora Music, saying the company is violating state law by refusing to pay labels and artists for its use of recordings made before 1972.

White Papers & Webcasts

See more White Papers | Webcasts

Join us: