Re: 2003 AD intergration with local Administrator Accounts on xp/win2k

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 01/23/05 

Date: Sat, 22 Jan 2005 19:30:17 -0500

Set up the Domain. Make sure that you create a user account object for each
of these users. You will have to join each of the workstations to the
domain ( well, you do not have to..... ). Then, the users can log on with
their domain user account object. You can make sure that they keep the
settings and such if you use Windows Explorer on each computer....

Each workstation is joined to the domain in the usual fashion. Just make
sure that DNS is configured correctly. You want to have only your internal
DNS Server information being handed out to the clients ( usually via DHCP ).
Do not include your ISP's DNS Server information. That belongs in the
Forwarders tab ( in the DNS MMC ). 

-- 
Cary W. Shultz
Roanoke, VA  24014
Microsoft Active Directory MVP
http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
"Josh Davis" <none@nospam.net> wrote in message 
news:4283v0pi87l92fu4uufve9cq0cdrjm7vu5@4ax.com...
> Hi all we are migrating from NT4 to a windows 2003 server.
>
> My users are all engineers that have local accounts on their pc's
> each local account has full Administrator access so they can do
> whatever they want with their pc. Currently their pc;s are configured
> to work in a workgroup.
>
>
> I would like all of these end users to be a part of our new domain.
>
> A couple of questions come to mind.
>
>
> 1 How can AD be configured so that the user logging into the
> domain has full control of their local pc but not admin access
> of the actual domain.
>
>
> 2 Would I be correct in assuming that in the AD Scheme of things
> that when a pc logs onto a AD that they are really becomming a
> member server of the domain just like the method used for
> adding say a workstation/server to a NT Domain
>
>
>
> Thanks for your insight and assistance.
>
> Josh.
>
>