We conducted authentication and access control tests to determine the best method for shared access.
- Full Active Directory (recommended)
- Where the XProtect Corporate server and the PowerScale cluster are part of the same Windows domain.
- Partial Active Directory
- Where the XProtect Corporate servers are part of the Windows domain, but the PowerScale cluster is administered locally.
- Fully locally administered control
- Where the XProtect Corporate servers and the PowerScale cluster are administered locally.
Alternatives to the previous methods might exist, but the Dell Technologies Safety & Security Lab team does not plan to derive or support other methods.
- Click .
- Under Active Directory, select Join a domain and add the Windows domain and appropriate users using one of the following options:
- When the PowerScale cluster and XProtect are not part of the same domain, set the shares to Run as Root. This setting is not ideal from a security perspective.
- When the PowerScale cluster and XProtect server are part of the same domain, configure the DVM Camera service to use the Domain account with read/write permissions to the PowerScale cluster share. During the initial installation of the camera server, use the XProtect administrator account specification wizard to configure the camera service. Specify the recording location for the camera server using the full UNC path of the PowerScale share.