All Products
Search

This Product

    Cloud Storage Gateway:Configure AD and DNS

    Document Center

    Cloud Storage Gateway:Configure AD and DNS

    Last Updated:May 07, 2026

    Configure Active Directory (AD) and DNS settings for your Cloud Storage Gateway (CSG) to enable centralized domain user authentication for SMB shares.

    Important

    AD domain users and local users cannot be active at the same time. Joining or leaving an AD domain automatically removes all existing user permissions for the SMB share.

    Prerequisites

    An Active Directory domain controller is available. For more information, see Set up an AD domain on a Windows instance.

    Background

    Active Directory (AD) is a directory service that uses standard protocols to access and manage data on an IP network. Configure your gateway to join an AD domain for centralized user authentication.

    • The CSG console supports AD and DNS configuration starting from version 1.0.36.

    • The AD integration feature supports 64-bit Windows Server 2016 Datacenter Edition and Windows Server 2012 R2 Datacenter Edition.

    Update DNS servers

    Important

    To join the gateway to an AD domain, configure the gateway DNS service as follows:

    • If the domain controller and DNS server are deployed on the same host, configure the gateway DNS service in the following format:

      <domain_controller_IP>,100.100.2.136,100.100.2.138

    • Deploying the domain controller and DNS server on separate hosts is not supported. This feature is planned for a future release.

    100.100.2.136,100.100.2.138 are the built-in DNS servers of the gateway.

    1. In the CSG console, go to the Gateways page, click the target gateway, and then click AD/DNS.

    2. On the Switch DNS Server page, enter the IP address of the AD domain controller or DNS server, and then click OK.

    Join an AD domain

    1. In the CSG console, go to the Gateways page, click the target gateway, and then click AD/DNS > Add to AD.

    2. On the Add to Windows AD page, configure the following parameters and click OK.

      • Server IP Address: Enter the IP address of the AD server.

      • Username: Enter the administrator username.

      • Password: Enter the administrator password.

      After the gateway connects successfully, the Connected status in the Windows Active Directory (AD) section changes to Yes.

      Note

      • Joining an AD domain removes all local user permissions for the current SMB share.

      • CSG does not support joining a gateway to multiple domain controllers, such as both a parent domain and a child domain.

      • After the gateway joins an AD domain, user information can be queried only through the domain controller.

    Leave an AD domain

    1. In the CSG console, go to the Gateways page, click the target gateway, and then click the AD/DNS tab.

    2. To leave the AD domain, in the Windows Active Directory (AD) section, click End Connection.

    Related topics

    How do I configure read/write permissions for domain users who access shared resources?