Discussion Locked

Logging onto a domain & home workgroup

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a user that logs onto our network domain for work, but when they go home they want to log onto a seperate workgroup to share files and a printer attached to there personal computer. Is this possible by having them log out of the domain login and log into the local machine, and if so, how do you set them up in a personal workgroup without removing the work domain that I don't want to change?

Thanks

7 replies

by jeaster

What OS are you running? Since a workgroup does not have server level security, have the user use an account local to the workstation they are using (i.e. change there domain to "this computer" before logging in). Then, they can browse the network. When they return to work, they will simply need to change the domain drop down box from "this computer" to the NT/2k/2k3 domain they need to authenticate with.

by mschnauber

We are running Win 2000. Changing the logon to the local machine if fine, but the user still will not be connected to there home workgroup without having to constantly change there network identification from the network domain to the home workgroupwithin system properties, right?

by whw

Hardware profile configurations should give you the "switch" your looking for. Copy the current one. Reboot, start the "new" hardware config and set it up for the "home" setup.

HIH

by joseph moore

Ok, so the user is changing the laptops domain membership when he/she goes home, removing it from your domain and adding it to the home Workgroup? Is that what is going on?
IF so, then there will be problems one day.
The SID for the OS install ison the laptop, and when the laptop joins the domain, this SID info is sent to the domain controllers.
When you are in a Workgroup, you have a SID also.
But eventually, the SID is gonna get mangled from all of this changing, and the user won't beable to log into the domain. Then you will need to remove the laptop's account from the domain, so it can be added again, just like a brand new machine.
Basically, this is a problem just waiting to happen.
Work with the user and explain how they can still access their Workgroup machines from a Domain-member laptop. They might need to manually authenticate to the Workgroup machines (a BAT file with NET USE commands can make this automatic) to do so, but it will work. Plus, it really will be easier then all of this domain membership changing.
A single BAT file on the Dekstop that contains the IP addresses (or machine names) of the Workgroup machines, with valid Workgroup username/password, that manually authenticates to the IPC$ on each Workgroup machine.
The laptop user would bring the laptop home, log in using their Domain username and password, then double-click the BAT file. The BAT file will then talk to all Workgroup machines, authenticate with the Workgroup username and password, and then that is it!
The BAT file could also contain drive mappings to Workgroup shared folders. All in one double-click.
You see, it is easy to talk to non Domain machines from a Domain machine, if you know how to handle the authentication.
Feel free to send me a private message if you need help on writing the BAT file.

hope this helps

This discussion is closed to new replies.