Re: Networking off domain

On Mon, 27 Nov 2006 12:54:02 -0800, Gerald <Gerald@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:

I have a group of XP users with notebooks on our internal domain who need to
be able to share files etc when off the company domain. Typically a group of
them would be out at a client and need to share files between each other.

The problem is that they usually are able to "see" each other in Winodws,
but cannot access each others computers. Usually the error is access denied
insufficient rights.
Even when we create local users with admin rights we have no success. We
have to unjoin the domain and create a workgroup and then we can work.

On returning to the office the notebooks are set back to domain to tak
advantage of the domain group policies.

Any suggestions on how to network off a domain?

Thanks in advance ...

Gerald,

There are several services that your computers are probably getting while
connected to the domain.
1) DHCP - IP address settings.
2) Name resolution - conversion of computer name to IP address.
3) Browsing - share broadcasts supplied to each computer.
4) Authentication - a domain server that identifies each person connecting to
another computer.
<http://nitecruzr.blogspot.com/2005/05/have-laptop-will-travel.html>
http://nitecruzr.blogspot.com/2005/05/have-laptop-will-travel.html
<http://nitecruzr.blogspot.com/2005/07/windows-networking.html>
http://nitecruzr.blogspot.com/2005/07/windows-networking.html

If you're un joining the domain, and creating a workgroup, you're bypassing
issue 3. But you're doing it the wrong way. And there are other issues.
1) Apparently you are using fixed IP addresses, or maybe APIPA settings,
successfully, and getting IP addresses.
<http://nitecruzr.blogspot.com/2005/07/limited-or-no-connectivity.html>
http://nitecruzr.blogspot.com/2005/07/limited-or-no-connectivity.html
2) If you normally have a domain, you probably have DNS based name resolution.
That's a problem, it will cause "name not found" and "access denied", when
you're off the domain.
<http://nitecruzr.blogspot.com/2005/06/mysterious-error-5-aka-access-denied.html>
http://nitecruzr.blogspot.com/2005/06/mysterious-error-5-aka-access-denied.html
3) If you normally have a domain, you probably depend upon the domain master
browser. Your computers could be using cached information, which expires
eventually. This too could cause "access denied".
<http://nitecruzr.blogspot.com/2006/09/nt-browser-and-windows-networking.html>
http://nitecruzr.blogspot.com/2006/09/nt-browser-and-windows-networking.html
4) If you depend upon domain authentication, and you're off the domain, with no
domain controller to authenticate you, you'll get "access denied".
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html

So how to do this?
1) Setup fixed IP addresses on each computer, instead of APIPA.
<http://nitecruzr.blogspot.com/2006/08/manual-network-setup-procedures.html#Alternate>
http://nitecruzr.blogspot.com/2006/08/manual-network-setup-procedures.html#Alternate
2) Setup LMHosts on each computer, defining each other computer by the fixed IP
address setup in step 1.
3) Define shares by fixed IP address, against the setup in step 1.
4) Setup local accounts on each computer, activated for network access, with
synchronised passwords.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

Are these notebook computers running an ad-hoc WiFi network? That's another
barrel of monkeys.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
.

Relevant Pages

  • Re: slightly-OT: centralized user management
    ... > sort of centralized user authentication mechanism ... > have experience with a combined NIS/NFS setup for a computer lab I ... > laptop and I unplug it from the network. ...
    (Debian-User)
  • Re: BAS and Tutorial 3 -stuck
    ... Looks like an authentication/party resolution issue. ... Is your isolated host authentication trusted (mark this in the admin ... This is necessary to allow for party identification. ... Is your web service setup to require authentication (IIS management ...
    (microsoft.public.biztalk.general)
  • Re: [opensuse] Is it possible, SMTP Auth stand alone ?
    ... server can be use for our employee outside my network. ... setup more than just authentication, you should also setup ssl encrypted ... A working setup can be gotten from using Yast. ...
    (SuSE)
  • Re: VPN / Remote computer joining the domain
    ... You don't need to join to the domain to browse the network. ... Name resolution is big issue in VPN access. ... If your VPN server doesn't setup correctly or the VPN client can't receive the VPN DNS and WINS settings, ...
    (microsoft.public.windows.server.networking)
  • IIS IUSR_localmachinename question
    ... I am being prompted for authentication even though I have setup ... 'Access this computer from the network' priviledge? ... Joshua ...
    (microsoft.public.inetserver.iis.security)
Loading