IT Employment
Hi there,
Does anyone have a solution for this. How to make a pc join 2 different domains that are not even in the same building? Basically on your Ctrl-Alt-Del screen you have the option of selecting domain X or domain Y.
Thank you!
by lordinfidel
A machine can not belong to 2 domains at the same time.
However, if the domain that the computer is joined to "TRUSTS" another domain. Then in your drop down you will see the trusted domains also.
A normal user though can not just go and create a trust. This must be done between the 2 admins for the resective domains.
In short, a computer can only have 1 computer account in any 1 domain at any given time. It is not possible to have a computer belong to 2 domains at the same time.
by guruofdos
The way the question was phrased, the idea is to CHOOSE which domain to log onto, not join two domains simultaneously.
I've seen it done under NT so I assume it's possible on 2k/XP. The CTRL-ALT-DEL screen had a Name, Password and Domain box, and the user could click a dropdown list of domains to join. In order to change domain, obviously they had to log off the one they were currently joined to.
So yes, it IS possible...certainly NOT simultaneously though! I just don't remember HOW they did it! I shall make enquiries!
by joseph moore
say you are on MACHINE1, and it belongs to DOMAIN1.
Now, if DOMIAN1 trusts DOMAIN2, then when you sit down to MACHINE1 and press CTRL+ALT+DEL, in the Domain drop-down list, there are 3 choices, DOMIAN1, DOMAIN2 and the local machine MACHINE1.
You see, for every domain that your domain trusts, that domain is then listed in the Domain drop-down. The idea here is that any user from any trusted domain can log into any machine that is a member of any of the trusted domain, and log in using their domain username/password/domain.
So, users from DOMAIN2 can come into the office of DOMAIN1, sit down at MACHINE1, and log into DOMAIN2 with their username and password, just like when they are in THEIR OWN office.
I know, a lot of "domain this" and "domain that" but that is how it works. :-)
by lordinfidel
As Joseph also stated.
That was why you saw multiple domains in the drop down menu.
The primary domain trusted other domains. This is a common in a enterprise enviroment with multiple domains. But it is not common between 2 business' or networks that have no strategic alliance to join each other together.
by guruofdos
This was a third-party piece of software and had nothing to do with trusts. It even has the option to allow typing in of a domain name if you don't like any in the drop down list!
I spoke to the guy I have seen using this and he tells me it is part of an NT/2k utility package called "Domainator" written by a team of network specialists for a military application. The system I saw it in use was on an Air Force base in Southern England.
So there!
by lordinfidel
They would have to replace the logon facility.
But even then, it would also need to change the computers registration/sid to be allowed to get on that network.
When you join a domain, your sid is altered to match that of the domain.
I put the Domainator name thru google and all it came up with was a domain name submitter. Not the util your referring to. And I did not see it in the resource kit.
Are you sure that it was what they were talking about. Can you ask them for a direct link to the site.
Not to be a skeptic, but I've never heard or seen anything like that before. Especially since the ctrl+alt+delete is a system trap, and they would need to create a trojan program that intercepts that call before the OS.
by guruofdos
I just got off the phone with the support tech on the RAF base. He gave me details of the software and told me to speak to the guy who wrote the package.
He explained exactly how it works, and indeed it does involve replacing certain files when the OS is installed. The software is NOT commercially available as it was written for a very specific reason for a very specific customer. He did hint though that is isn't a 'huge' change to the OS and that it only took an afternoon to write the code and that the information to do the job yourself is 'public domain'.
I guess thats about as much as I can tell you. He did however re-iterate that it has nothing to do with 'trusts'!
by voldar
Only for accessing resources on the two networks? If this is the case, you really don't have to join that domain. There are only few steps that you have to make:
- the TCP/IP address should be DHCP enabled on that laptop (I presume we are talking about a laptop) so that you can dinamicaly change the IP address if needed by using ipconfig /release (/renew). Tis way you are able to "talk" with other computers in the same domain.
- in each domain you have a user name allocated
in the AD, this way you can browse the network using that user name.
If you really want to be part of two different domains - you can not do that, unless what Joseph Moore specified. Imagine the group policies enabled at the machine level on each domain.
by iain
Microsoft OS's can ONLY be a member of ONE domain at a time.
There maybe custom apps that will change the OS to allow membership of more that one domain at a time - BUT the OS will no longer be an MS OS. It will then be a custom bodged thing.
by voldar
by gmomtz
If you want to see 2 dominoes to you see it:
for connections for wan or lan
1. - you should have the same login and password in both
2. - when entering to the windows scanner you indicate him that you want to see the whole net
3. - it selects the wanted domain
4. - voala
if this strategy doesn't work (but if you see the other net) the windows MMC begins, which can connect you to any domain or alone net has to have the administrator's login and its password
:)
This discussion is closed to new replies.
Sort by Trending