Question 1

What are the minimum hardware requirements for Zentyal?

Accepted Answer

This depends on the services you deploy and the number of concurrent users. The minimum requirements we usually give are an Intel Core i5, 8 GB of RAM and disk sized according to your data. Remember to use Ubuntu-certified hardware.

Question 2

What virtualization software can I use?

Accepted Answer

You can use the virtualization software of your choice. Simply keep in mind that it has to support the Ubuntu Server version that Zentyal is based on.

Question 3

Can I install Zentyal in the cloud?

Accepted Answer

Yes, you can install Zentyal Server in the cloud (e.g. AWS). Keep in mind that, due to the cloud architecture itself, some modules are probably not a good idea to install there. On a basic cloud deployment you could enable Network, NTP, DNS, Samba, Mail, Webmail, CA, VPN and Mailfilter. You would need another Zentyal Server on premises to configure a site-to-site VPN to the cloud server, and the DHCP module to configure the clients.

Question 4

What are the differences between the Development Edition and the Commercial Edition?

Accepted Answer

The Commercial Edition comes with extra features and quality-assured updates, and each commercial version is maintained for 4.5 years. Official support is available only for the Commercial Edition.

Question 5

What extra features does the Commercial Edition have?

Accepted Answer

Backup, user authentication in HTTP Proxy (Samba integration with HTTP Proxy), user profile picture management, IPSec/L2TP, domain-based HTTPS web page blocking, importing/exporting of users and groups, audit mode on/off for the file server, Smart Admin (kernel manager, reports and alerts), antivirus on-access scan, DHCP options 150 and 155 for IP phone configuration, and remote monitoring and management of registered servers (for distributors).

Question 6

How many users can Zentyal handle?

Accepted Answer

Zentyal as a domain controller has no capacity limitations beyond those inherent in Samba 4. Domains with thousands of users are properly managed, with no limitations other than functional levels (Windows Server 2008 R2), non-replication of SYSVOL, and those derived from server hardware capabilities.

Question 7

How do I manage GPOs with Zentyal?

Accepted Answer

GPOs are managed with RSAT installed on any Windows machine joined to the domain, logged in with a user account holding Domain Admin rights.

Question 8

Can I join Zentyal to an existing Windows domain?

Accepted Answer

Yes. Simply keep in mind that the functional domain level of your Windows Server has to be minimum 2003 R2 and maximum 2008 R2. These are the Microsoft Active Directory domain levels currently supported by Samba.

Question 9

Can I migrate my Windows Server to Zentyal?

Accepted Answer

Yes. It is usually possible to migrate the LDAP objects (users, groups, OUs, etc.) by joining Zentyal to the domain and replicating.

Question 10

Can I join Linux/Mac clients to a Zentyal domain?

Accepted Answer

It is possible to authenticate Linux/Mac clients against Zentyal Active Directory manually. Simply keep in mind that some concepts (e.g. “joining the domain”) are not technically possible.

Question 11

Can I deploy Zentyal with multiple domain controllers?

Accepted Answer

Yes. Simply keep in mind that SYSVOL, shares and roaming profiles are not automatically replicated.

Question 12

What happens if one of my DCs goes down?

Accepted Answer

If the other DCs are correctly configured, authentication and DNS keep working. Be aware that manual configuration is required to synchronize GPOs, shared resources, roaming profiles and personal folders.

Question 13

Can Zentyal be configured in high availability?

Accepted Answer

Zentyal comes with HA for user replication. Other scenarios, such as HA for files, can be configured manually with some limitations — tell us your specific requirements.

Question 14

Can I block web pages with Zentyal?

Accepted Answer

Yes. HTTP sites can be blocked with the HTTP Proxy module. HTTPS sites can be blocked at connection level using the Firewall module by IP address ranges, with a custom firewall rule, or by using OpenDNS as the main DNS forwarder. In the Commercial Edition you can also block HTTPS web pages by domain.

Question 15

Can I use custom configurations?

Accepted Answer

Yes, using stubs. Keep in mind that you should not modify the configuration files directly, as they are overwritten every time the configuration templates are processed (e.g. when saving changes).

Frequently asked questions

Installation & hardware

Editions & licensing

Active Directory & clients

Domain controllers & availability

Network & customization

Still have a question?