Advanced User Settings

To modify advanced user settings, you can go to Control Panel > User > Advanced. The below options are available.

Allow Users to Reset Forgotten Passwords

If you want to allow users to reset forgotten passwords via email, you can enable Allow non-admin users to reset forgotten passwords via email. When this option is enabled, a link marked Forgot your password? appears on the DSM login page. If a user forgets his password, he can click this link and enter his username. In this case, the system will send an email to the user containing a link to reset his forgotten password.

Note:

Before enabling this option, make sure you have already enabled SMTP email notifications. To do so, go to Control Panel > Notification.
To receive messages from the system, users must provide an email address in the user information section of their accounts.
Users who belong to the administrators group cannot reset passwords with this option.
Domain users cannot reset passwords with this option.
LDAP users can reset passwords with this option, as long as the DiskStation serves as the LDAP directory server.

Password Strength

You can set up password strength rules for users on your DiskStation.

Note:

Password strength rules only apply to new passwords. For example, new password strength rules are only applied when creating a new user account or when an existing user changes his password. Existing passwords and those belonging to imported user accounts are excluded from new password rules.

To enable password strength rules:

Check the Apply password strength rules checkbox to enable password restrictions.
Select more than one of the password restrictions from the rules below:

Exclude name and description of user from password: The password must not contain the user name or the user description. But UTF-8 encoded characters are excluded.
Include mixed case: The password must contain both upper and lower case letters.
Include numeric character: The password must contain at least one numeric character (0~9).
Include special character: The password must contain at least one ASCII special character (i.e., ~, `, !, @, #, $, %, ^, &, *, (, ), -, _, =, +, [, {, ], }, \, |, ;, :, ', ", <, >, /, ?).
Minimal password length: The password must be at least the value specified in the text field. The length should be a number between 6 and 127.

Click Apply to save settings.

2-Step Verification

2-step verification provides improved security for DSM user accounts. You can force DSM administrators or all DSM users to enable their 2-step verification in order to further protect their accounts.

To enforce 2-step verification for DSM users:

Tick the Enforce 2-step verification for the following users box, and select which users you want to apply this to.

Note:

If you have not yet configured 2-step verification at Options > Account, the 2-step verification setup wizard will be launched to help you complete the required settings before you can apply this enforcement.

With this enforcement applied, users that have not enabled their 2-step verification will be asked to finish the settings before they can log in to DSM.

Note:

Disabling 2-step verification enforcement here will not affect or disable the 2-step verification settings of each user. Users can keep their 2-step verification settings, or go to Options > Account to disable these settings.

User Home

Enable user homes to create a personal home folder for each user, except for guest. All users can access their own home folder via CIFS, AFP, FTP, or File Station.

Users belonging to the administrators group can access all personal folders located in the homes default shared folder. The name of home folder is the same as the user account.

To enable the user home service:

Check Enable user home service.
If there are multiple volumes, select where you want the homes folder to be stored.
Click Apply.

Note:

Once the local user home service is disabled, the domain user home service will also be disabled concurrently.

To disable the user home service:

Uncheck Enable user home service.
Click Apply.

After the user home service is disabled, the homes shared folder will be preserved for administrator access. Users will be able to access their home folders again when the user home service is enabled again.

Note:

To delete the homes shared folder, user home service must be disabled first.
The domain user home service would be disabled if the local user home service is disabled.