We will be implementing a point of sale system in the near future. The Vendor suggest creating a workgroup called Retail, and these workstations would then communicate over the WAN with the Master pc.
These workstations would not be joined to our domain but this traffic is still riding on the same network. I don’t know how or if its possible to hack the domain workstations from a pc joined to a workgroup or from the otherway hacking a workgroup from the domain. Am I being paranoid or are there risks here.
I think we need to create VLANs for this traffic but it will be a huge undertaking as we are spread out all over the county.
I’ve considered just joing these workstations to the domain but this is frowned upon from our operations staff as it would then require logins.
Any advice would be appreciated.