General discussion

Locked

WinXP in an NT Domain with WorkGroups

By BigWazza ·
We have a Win NT 4 domain and are getting in Win XP Pro workstations. Setting up the workstations is fine except that the PC and Domain passwords get out-of-sync. This is crucial for one PC in particular that the password be exactly correct on both.

I want to know how to setup Win XP so that:
- Domain passwords are enforced for desktops;
- Notebooks don't get upset if no network is found;
- The use of Workgroups to separate PCs across the network (I don't want one long list of PCs when browsing the network);
- When the domain password expires (or is about to), the user is notified of this, and can change it; and,
- Giving instructions to go into "Control Panel -> User Accounts -> <specific user> -> Manage Network Passwords" is too long to give to a user every time they need to change their password.

Basically this is the same as Win98 logging into the domain, except that it is enforced (can't escape out of it).

Forcing PC and domain passwords to stay in sync is OK, butI still want my workgroups.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

WinXP in an NT Domain with WorkGroups

by timwalsh In reply to WinXP in an NT Domain wit ...

Couple of things:

Unlike Win98 computers, where the domain password and the local computer Windows password can get out of sync causing a user to have to enter 2 passwords, you don't have the same problem with XP. With XP you will either be logging on to the domain (or workgroup) or the local computer, but not both at the same time. Yes, you may end up with different passowrds for each, but you won't have the double-password problem as with Win98.

You can set security policy in WinNT (for the domain) or on XP to prevent users from bypassing the log-on process. If the security poicy is such that the log-on screen appears, the user has no opportunity to by-pass it.

There is a setting in the WinXP Pro Local Security Policy titled "Interactive logon: Number of previous logons to cache (in case domain controller is not available)". This will allow a user to access their laptop using their normal doamin user ID and password when the laptop is not connected to the local network.

A Windows XP computer can be a member of a domain or a workgroup, not both.

Because joining a WinXP computer to a domain creates a computer account on the domain controller, moving a computer back and forth between domain and workgroup membership can be painful because joining a computer to the domain requires domain admin priviliges.

All computers joined to a WinNT domain are part of one large list.

Win98 users log-on to a domain but the computers don't join a domain in the same sense that WinNT/2K/XP computers do. Thats why you can set them up as members of workgroups, but still log-on and access domain resources.
(continued)

Collapse -

WinXP in an NT Domain with WorkGroups

by timwalsh In reply to WinXP in an NT Domain wit ...

I'm not aware of a setting in NT to allow you to send a warning to a user that their domain password will expire in "X" days. This setting does exist in XP Pro (or Win2K Pro) but it only applies to the local computer user accounts. There is also asetting in Win2K server group policies that can apply this same policy to an entire domain.

Make cheat sheets for your users with the instructions for changing their passwords. Then, hopefully, they won't have to bug you for the same instructionsevery time.

Hope this helps.

Collapse -

WinXP in an NT Domain with WorkGroups

by BigWazza In reply to WinXP in an NT Domain wit ...

Hmmm... I'll give you the points. (No-one else answered)

Not what I wanted to hear, but if that's the way MS did it, I can't be responsible for it. Anyway, I hope to get into things better now and you have clarified things quite a bit.

As for the password expiring, I think XP tells you it's expired (but only when you're connected to the domain).

Collapse -

WinXP in an NT Domain with WorkGroups

by BigWazza In reply to WinXP in an NT Domain wit ...

This question was closed by the author

Back to Windows Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums