Technical Anshu
Tutorials Blog
🗂️ Domain Join Guide

Join a Windows PC to a Synology Domain Step by Step

Joining a PC to the Synology domain is the same procedure as a Windows domain - and it fails for the same number-one reason: DNS. Get the order right and every PC joins first try.

✍️ Technical Anshu🗄️ Synology DSM 7🪟 Windows 10 / 11
🎥 Follow the video's live domain join, then use these verification checks

Once the Synology domain exists, each Windows PC joins it with a short routine. The routine itself is five minutes; the failures people hit are almost never the routine - they are the preparation steps skipped before it. This page gives the order that works: DNS, clock, join, restart, verify.

Verify the join worked - Command Prompt (example)
C:\Users\ravi> whoami office\ravi C:\Users\ravi> echo %USERDOMAIN% OFFICE C:\Users\ravi> nslookup office.local Server: NAS01.office.local Address: 192.168.1.10
✔ Example names and addresses - yours will differ, the pattern should not.
Three quick checks that prove the PC is really on the Synology domain - example output
1

Step 1 - Point the PC's DNS at the NAS

The PC finds the domain controller by asking DNS for the domain name. If the PC's DNS server is the router's public forwarding address or 8.8.8.8, that question never reaches the NAS and the join dies with an Active Directory domain controller could not be contacted. Set the PC's DNS server to the NAS's static IP - ideally permanently, by configuring the router's DHCP to hand out the NAS as DNS. Prove it before continuing: nslookup office.local (your domain name) must return the NAS's address.

2

Step 2 - Check the Clock

Kerberos, the login protocol, rejects authentication when the PC and the controller disagree about the time by more than a few minutes. A PC with a dead CMOS battery or a manually wrong clock will fail logins mysteriously after joining. Set the PC to automatic time, let it sync, then proceed.

3

Step 3 - Run the Join

  1. Log in to the PC as a local administrator.
  2. Open Settings > System > About and click Join a domain - or press Win + R, run sysdm.cpl, open the Computer Name tab and click Change.
  3. Select Domain, type your domain name (for example office.local), and click OK.
  4. When prompted, enter the domain administrator credentials - the admin account created on the Synology, not a normal user.
  5. The welcome-to-the-domain message confirms success. Restart the PC when asked.
4

Step 4 - First Domain Login and Verification

At the login screen choose Other user and sign in with a domain account. Three checks confirm a healthy join: whoami shows DOMAIN\username; echo %USERDOMAIN% shows your domain, not the PC's own name; and Group Policy reaches the PC - run gpupdate /force and it should complete without a domain error. The computer account now also exists in Directory Server on the NAS, where you can see and manage it.

5

When the Join Fails - Read It in This Order

Controller could not be contacted: DNS, almost every time - repeat step 1 and the nslookup proof; also confirm the PC and NAS are on the same LAN with no guest-Wi-Fi isolation between them. Credentials rejected: you used a normal user or the local NAS admin - the join needs the domain administrator account. Network path not found: the PC resolved something wrong - check for an old hosts-file entry or a second DNS address overruling the NAS. Fix the layer the message names, then retry - do not reinstall anything.

Watch the Complete Video Guide

The video joins machines to the live Synology domain - watch the sequence once and the steps above will feel familiar.

Watch Full Video
Common Questions (FAQ)

Can Windows Home edition join the Synology domain?

No. Domain joining is a Pro-and-above Windows feature, exactly as with a Windows Server domain. Home edition PCs can still use NAS file shares with a domain account, but they cannot be domain members or receive Group Policy.

The join says the domain controller could not be contacted. What is wrong?

In nearly every case the PC is not using the Synology NAS as its DNS server. Set DNS to the NAS's static IP, confirm with nslookup that the domain name resolves to the NAS, and the join will normally succeed immediately.

Do I need to join PCs one by one?

For a small office, yes - it is a five-minute desk visit per PC, and it is also your moment to verify DNS and time settings on that machine. There is no supported bulk-join magic for a domain this size; the visit is the quality control.

This guide is based on the Technical Anshu video on the free Synology domain controller. Stuck on a step? Ask in the video comments - you will get an answer there.