We conducted authentication and access control tests to determine the best method for shared access.
- Full Active Directory (recommended)
- Where the NX Witness server and the Isilon cluster are part of the same Windows domain.
- Partial Active Directory
- Where the NX Witness servers are part of the Windows domain, but the Isilon cluster is administered locally.
- Fully locally administered control
- Where the NX Witness servers and the Isilon cluster are administered locally.
Alternatives to the previous methods might exist, but the Dell Technologies Safety & Security Lab team does not plan to derive or support other methods.
- Click .
- Under Active Directory, select Join a domain and add the Windows domain and appropriate users using one of the following options:
- When the Isilon cluster and NX Witness are not part of the same domain, set the shares to Run as Root. This setting is not ideal from a security perspective.
- When the Isilon cluster and NX Witness server are part of the same domain, configure the DVM Camera service to use the Domain account with read/write permissions to the Isilon cluster share. During the initial installation of the camera server, use the NX Witness administrator account specification wizard to configure the camera service. Specify the recording location for the camera server using the full UNC path of the Isilon share.