Account

The computer account contains information about the computer and establishes a trust relationship between the computer and the domain. The user account contains information about the user. Both are necessary to logon to the domain via LAN. Otherwise, an unauthorized user could logon via a trusted PC.

Presuming you are using a NT Workstation the computer account must be created before the workstation can interact with the domain. Once this is accomplished the workstation has access to the domain accounts database.

Now you can have a user loginto the local workstation. They will be able to browse the domain but everytime they attempt to view the shared resources on a system they will be prompted to supply a userID and password to access the domain resource.

Unless you want to activate the domain Guest account (a no-no in most circles) then any user wanting to access domain level resources must have a domain account. If you are worried about security just place the user(s) in their own group and give rights and permissions as needed. (Removing a user from the Domain Users group will limit their access to only those resources that the Everyone group has access to.)

If you create a user account on the individual machine they will not have domain access only access to that particular machine. Now you can use Domain Administration tools from the workstation to build the account on the PDC or BDC.

This question was closed by the author