Windows Forum

Ask something
Discussion Locked

User or Domain management

0 helpful
10 replies

by lemm

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How do I log on a user on two domains?

10 replies

by joseph moore

Well, you don't, first off. NT4 will only log into a single domain or workgroup after it boots up and you press CTRL+ALT+DEL.
Now, if you need to access resources from another domain (shares, printers) you can do that. In fact, it is easy.
If the two domains are doing a 2-way trust (each trust the other), then the user account in the 1st domain can be given permissions on resources in the 2nd domain the same way you normally give permissions to objects. So, you can set the NTFS permissions ona shared folder to include the user in the 1st domain just by pulling up the Security tab, clicking Add, and selecting the 1st domain in the domain box, then selecting the user.
Same idea for permissions on Shares.
Also, you can add the user from the 1st domain into any groups in the 2nd domain just by selecting the domain and then the user.
In the logon script for the user in the 1st domain, you can just add drive mapping lines just like you normally do:

NET USE S: \\SERVER1\SHARE
NET USE T: \\DOMAIN2\SERVER2\SHARE

You can specify the machine name for machines in the 2nd domain with no problem if you are running WINS between both domains, and having the 2 WINS servers being push-pull replication partners. That way, your NT4 machines will get name resolution for the machines in the 2nd domain. If you are not running WINS, then just put the IP address for the machines of the 2nd domain in the Net Use line like this:
NET USE T: \\10.1.2.12\SHARE

(of course, you would put the IP address of the machine from the 2nd domain in there, instead of my example IP)

by joseph moore

Now, if the two domains are NOT running a trust, it makes life a little more difficult. What you can then do is have the admin in the 2nd domain set up a user account in his/her domain that has access to whatever resources you need.
You can then specify the Net Use lines to map to the 2nd domain resources using this login/password by using the /USER: switch:
NET USE T: \\10.1.2.12\SHARE /USER:2NDDOMAIN/USERACCOUNT "password"

The /USER: switch lets you specify what user account to use. Putthe 2nd domain name\user account made for your users to use, followed by a space, then put in the password that account is set to use without the quotation marks.
If you need to set up printing to the 2nd domain, you can do that this same way, justspecifying the /USER: switch in the Net Use LPT1 line. Works just the same.

I hope I understand your question correctly.

by ann777

simultaneously?? -- you cannot.

through software and deceiding which domain to boot into??? -- you can by using www.netswitcher.com software. $9 for software that will allow you to preconfigure the software for multiple domain logins.

by maxwell edison

You can only log on to one domain, however, you can establish a trust relationship between the two domains.

In a trust relationship, users can log on to Domain A and then access resources in Domain B without supplying a username and password a second time. Domain A is the trusted domain, and Domain B is the trusting domain. Domain B trusts Domain A that the user is legitimate. The converse is not true: Domain A does not trust Domain B unless you set up a reciprocal trust relationship.

A trust relationship does not automatically give users access to other domains. Trust relationships enable users from one domain to have permissions in another domain, at the administrator's discretion. A trust relationship must exist before an administrator can grant permissions for users from other domains to access resources in the trusting domain.

See this article by Windows Magazine on domains and trust relationships:

http://www.win2000mag.com/Articles/Index.cfm?ArticleID=3778

(REMOVE SPACES from the pasted URL.)

Maxwell

This discussion is closed to new replies.