Synology for a Small Business - Shared Drives & a Backup Strategy

Why a Small Office Benefits From a NAS

Most small offices grow into a mess by accident. One person keeps the master spreadsheet, another emails a copy, and soon nobody knows which version is real. A NAS fixes that by giving everyone one shared home for files.

It also grows with you. Add a staff member and you add an account. Run low on space and you add a drive. You are not paying a rising monthly bill for every gigabyte the way pure cloud storage charges.

• One version of the truth. Files live in one place, not five inboxes.
• Access control. The right people see the right folders - and only those.
• Automatic backup. Every office computer can be protected without anyone remembering to do it.
• It stays in your building. Your files sit on your own device, not only on someone else's cloud.

Picking a Synology Model for a Team

Synology makes many models. For a small office, you are choosing mostly on two things: how many drive bays it has, and whether it supports the features a business wants. Bigger numbers in the model name generally mean more capability.

You will also buy the hard drives separately. For a business, use drives rated for continuous, always-on use rather than the cheapest desktop drives. Buy an extra matching drive to keep on the shelf as a spare.

• At least two drive bays so drives can mirror each other - if one fails, you keep working.
• Enough memory to run the backup and file-sharing packages smoothly for several users.
• Btrfs support - a file system that enables the snapshot protection we rely on later.
• Room to grow - a four-bay model gives you breathing room as the team and files expand.

Setting Up Users and Groups for Staff

The first rule of a business NAS: every person gets their own account. Shared logins hide who did what and make it impossible to remove one person safely. Individual accounts are the foundation of everything else.

You manage all of this in the NAS Control Panel under the users and groups section. Set a policy that requires reasonably strong passwords, so nobody protects the payroll folder with the word password.

• Create one user account per employee, each with their own password.
• Create groups by department - for example Office, Sales, or Accounting.
• Put each person into the groups they need, then set folder access on the group.
• This means adding a new hire is quick: create the account, drop them in a group, done.

Department Shared Folders and Permissions

A shared folder is a top-level folder on the NAS that you decide who can reach. Think of them as the filing cabinets for your office - one per department or purpose, each with the right lock on it.

For each folder you choose a permission level per group: no access, read only, or read and write. Give people the least they need to do their job. Read only is perfect for reference material you do not want changed by accident.

• Company - general files everyone may read.
• Accounting - restricted to the finance group only.
• Sales - the sales group, plus managers.
• Management - owners and managers only.

Mapping the Drive on Windows and Mac

You want the shared folders to feel like a normal folder on each computer, not something people have to hunt for. On Windows this is called mapping a network drive; on a Mac it is called connecting to a server. Both give you a folder that is always there.

Once mapped, saving to the shared drive is exactly like saving to any folder. That familiarity is the whole point - staff should not have to learn anything new to use it every day.

• Windows: in File Explorer, use Map network drive and point it at the NAS folder. It then shows up with a drive letter like S: for Shared.
• Mac: in Finder, use Connect to Server and enter the NAS address. The folder appears in the sidebar.
• In both cases the person signs in with their own NAS account, so permissions still apply.

Synology Drive for Sync and Working From Home

Mapping works great inside the office. But when staff work from home or travel, you want Synology Drive. It is Synology's own package that keeps a folder on a laptop in sync with the NAS, a lot like Dropbox - except the files live on your NAS, not a rented cloud.

You install the Synology Drive Server package on the NAS, then the Synology Drive Client app on each computer. Staff sign in with their own account and pick which folders to sync.

• A synced folder on each laptop that mirrors a folder on the NAS.
• Files that are available even with a weak connection, then sync when back online.
• Version history, so an earlier copy of a document can be recovered.
• Secure access from outside the office without exposing the whole NAS.

Active Backup to Protect Every Office PC

Here is one of the best reasons to own a Synology. Active Backup for Business is a free Synology package that backs up your office computers to the NAS automatically - no per-machine fees and no one having to remember to do it.

You install Active Backup for Business on the NAS, add a small agent to each computer, and set a schedule. From then on, each machine backs itself up quietly. If a laptop is lost or dies, you restore it to a new one instead of starting from nothing.

• Windows PCs and laptops - entire machines, so you can restore everything after a failure.
• File servers and folders if you have them.
• Microsoft 365 mail and files, which many people wrongly assume are already backed up.

The 3-2-1 Backup Plan for a Business

This is the single most important idea in the whole guide. The 3-2-1 rule is the backup standard professionals use, and it is simple enough to say out loud.

Your NAS gives you copy one and, with Active Backup, copy two. The missing piece for most offices is the offsite copy - the one that survives a fire, a flood, a theft, or ransomware that reaches everything in the building. The next pages fix that.

An Offsite or Cloud Copy With Synology C2

The offsite copy is the copy that saves the business on the worst day. If the building is gone, this is the one that brings your files back. Synology C2 is Synology's own cloud service built for exactly this.

C2 is not the only option - a second Synology at another location, or another reputable cloud, can also serve as the offsite copy. The point is simply that one good copy lives outside your building.

• You use a Synology backup package to copy the NAS to Synology C2 on a schedule.
• The copy is encrypted, so your files are protected in transit and at rest.
• It runs automatically overnight, so it never depends on someone remembering.
• If the NAS is destroyed, you restore from the cloud copy to a new one.

Snapshots as Ransomware Protection

Ransomware is a nasty program that scrambles your files and demands money to unscramble them. Snapshots are one of the best defenses a Synology offers, and they are close to free to run.

A snapshot is a saved picture of your folders at a moment in time. The NAS can take them often - hourly or daily - and keep many of them. If ransomware or a bad delete wrecks your files, you roll the folder back to a snapshot from before it happened, often in minutes.

• Snapshots use the Snapshot Replication package on a Btrfs volume.
• They take very little space, because they only record what changed.
• They can be made read-only and locked, so even ransomware cannot erase them.

A UPS for Power Protection

A NAS is a small always-on computer with drives that are often writing data. A sudden power cut in the middle of a write can corrupt files or the storage itself. A UPS prevents that, cheaply.

UPS stands for Uninterruptible Power Supply - really just a battery in a box. The NAS plugs into it, and it plugs into the wall. If the power blinks or goes out, the battery carries the NAS for a few minutes. Synology can watch the UPS and shut the NAS down safely before the battery runs out.

• Protects against corruption from sudden power loss.
• Rides out the brief flickers and brownouts that are common in storms.
• Lets the NAS power down gracefully, then come back cleanly when power returns.

Security Basics: 2FA, Firewall, Security Advisor

A business NAS holds valuable data, so a few security steps are not optional. The good news is Synology gives you strong tools built in, and turning them on takes an afternoon.

DSM is DiskStation Manager, the software that runs the NAS - the screen you log into. Security Advisor lives right inside it and will walk you through most of the fixes in plain language.

• Turn on two-factor authentication (2FA) for every account, especially admins - a password plus a code from a phone app.
• Enable the built-in firewall so only the connections you want are allowed.
• Run Security Advisor, Synology's own checkup that flags weak settings and gives you a to-do list.
• Keep DSM and every package updated - updates close security holes.
• Avoid exposing the NAS directly to the internet unless you truly need to, and use secure connections when you do.

Who Should Hold Admin Rights

Admin is the master key to the whole NAS - it can change anything, see everything, and remove anyone. The safest setup keeps that key in very few hands. This is called least privilege: people get only the power their job requires.

Fewer admins means fewer ways for a mistake or a stolen password to cause real damage. It also makes it obvious who to call when something needs changing.

• Rename or disable the default admin account - attackers try that exact name first.
• Create one or two named admin accounts for the people who truly manage the NAS.
• Everyone else is a regular user with access only to their folders.
• Keep a written record of who holds admin, kept somewhere safe.

Onboarding and Offboarding Staff Accounts

People join and leave. Handling their accounts cleanly protects your data and saves headaches. Because you built groups earlier, both jobs are quick and safe.

• Create their personal account with a strong starting password.
• Add them to the department groups their role needs - nothing more.
• Map the shared drive and install Synology Drive on their computer.
• Show them where files live and how backups work.

Writing Down How It's Set Up

The setup living only in one person's head is a risk. If that person is on vacation - or gone - nobody else can help. A simple written record turns your NAS from a mystery into something anyone can manage.

Keep this document somewhere safe and outside the NAS itself, so you can reach it even if the NAS is down. A printed copy in a locked drawer plus a copy in a password manager works well.

• The NAS model, its network address, and where it physically sits.
• The shared folders and which groups can reach each one.
• Who holds admin, and the recovery contact.
• What is backed up, to where, and on what schedule.
• Where passwords and recovery keys are kept - securely, not on a sticky note.

A Maintenance Routine

A NAS is not a set-it-and-forget-it appliance - it is closer to a company vehicle that needs occasional checks. A short routine keeps small problems from becoming big ones.

The NAS can email you when something needs attention - a failing drive, a failed backup, a full volume. Turn those notifications on so problems find you instead of hiding until it is too late.

Scaling Up Later

A good NAS setup grows with your business instead of forcing a do-over. Knowing your options ahead of time means you can plan rather than scramble when you outgrow the current setup.

Plan for growth before you are desperate. Watching your free space over time tells you when to act, so you upgrade calmly on your schedule rather than in a panic when a drive fills up mid-project.

• Add drives to fill empty bays and expand your storage pool.
• Replace drives with larger ones, one at a time, to grow capacity in place.
• Add an expansion unit on models that support it, for many more bays.
• Add a second NAS at another site as your offsite backup target.

When to Get a Professional to Set It Up Right

Plenty of this you can do yourself, especially with a guide like this. But a business NAS holds the files you cannot afford to lose, and some parts are worth getting right the first time with a professional.

• Day-to-day tasks: adding a user, creating a folder, mapping a drive.
• Running Security Advisor and applying the easy fixes.
• Checking that backups ran and testing a restore.

What's in the 27-page PDF

• Why a shared drive beats files scattered across laptops
• Setting up staff accounts, groups, and folder permissions
• Mapping the drive so it feels like a normal folder
• A real backup plan: Active Backup, snapshots, and offsite copies
• Security basics, admin rules, and staff onboarding
• A maintenance routine and when to bring in a professional

Why I wrote this

I write these as printable handouts because a guide you can keep in a drawer beats a web page you have to find again. No jargon, no judgment, no rushing. If you'd rather have someone sit beside you and go through it together, that's a flat $99 first visit with the 30-day follow-up included — serving Portage County from Atwater, Ohio. — Bill