Errors while trying to add QNAP TS-859U-RP NAS to AD domain

English Networking
1

I’ve been trying to add my QNAP TS-859U-RP Network Attached Storage device to my Server 2025 Active Directory domain.

I receive the errors shown below when trying to use either the express wizard to the manual wizard where I enter in all of the domain and domain administrator user account name and password information.

This happens even though I’m entering in the domain administrator username and password and even though I’ve entered in the DNS IP addresses within the QNAP NAS of the two main domain controllers which are also DNS servers.

The primary DNS server IP address that is being used within the QNAP configuration is a Global Catalog server and also hosts all the FSMO roles.

The secondary DNS server IP address is also included and I’ve also tried putting in the IP addresses of other Windows AD domain controller DNS servers as the secondary DNS server within the QNAP NAS but none of these things have worked so far.

I also just used the same domain administrator username and password and other information to join my Synology NAS to the same Active Directory domain.

I’ve also made sure that the date, time, & time zone set within the QNAP NAS are correct and are also the same as the date, time, & time zone within my Windows Sever Active Directory domain controllers.

The firmware version has been updated to the latest version which is QNAP Firmware version #: 4.2.6 Build 20240618.

What else can I do so I’ll be able to successfully join this QNAP TS-859U-RP Network Attached Storage device to the Server 2025 Active Directory domain?

2

Could be incompatible with that 12 year old NAS, did you disable all security requirements on your AD to test?

3

Can you provide me with a list of all of these security requirements? I need to disable on my actual Directory domain controller?

Or do you have a checklist on anything else that needs to be done to further troubleshoot this to get it to work?

4

Mandatory authentication would be on my list

https://support.microsoft.com/en-us/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16

5

Microsoft has indeed emphasized new security features for AD domains and the SMB protocol in the official documentation for Windows Server 2025. This means that when joining a Windows Server 2025 domain, it will require support for SMB signing, Kerberos, or NTLM over a secure channel.

To ensure full compatibility with the Windows Server 2025 AD environment, we recommend using QTS 5.2.x or later versions.

6

We understand you’re looking to use this feature. However, your current NAS model is an older generation and doesn’t support updating to the latest QTS 5.2.x version, which is required for this functionality.

If you wish to utilize this feature, we recommend considering a newer NAS model. Your current device could then serve as a valuable backup machine.

Thank you!