Re: Require PC to join Domain to access resources

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

no you cannot prevent that....

you could go for the IPsec way...... each domain client would be able to communicate with other clients and servers as long as they are joined to the domain to receive the settings. If you are not joined, no settings--> no communication

http://www.microsoft.com/downloads/details.aspx?FamilyId=5ACF1C8F-7D7A-4955-A3F6-318FEE28D825&displaylang=en

quote:
The objective of setting up domain isolation in a test lab is to configure a test lab network in which isolated domain member computers accept only authenticated communications initiated from other domain member computers, while ignoring communications initiated from non-isolated computers outside the isolated domain.

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Gamit" <Gamit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:A4190784-E54F-4E87-B931-83A71F3B6F88@xxxxxxxxxxxxxxxx
We have multiple users throughout our organization that are not joining their
PCs to the domain. They are still able to access network resources by
providing their credentials when prompted. Obviously we can no longer enforce
group policies and manage software including updates through WSUS and
anti-virus. Is there a way for me to enforce, through software, users joining
their PCs to the domain before they can access certain domain resources?

.

Relevant Pages

  • Re: How do I programmatically install a SSL Certificate to a WinCE 5.0 Device?
    ... SSL Cert issued by VeriSign. ... communicating to our SSL Servers and I'm trying to increase the encryption ... communications (or improperly accepting all cert discrepancies using the ...
    (microsoft.public.dotnet.security)
  • Re: Win2k3 Security Settings Break PerfMon
    ... You didn't say what the operating system is of the servers you are having ... You mention that it is odd that increasing security ... The new template is probably not allowing communications ... enterprise and high secure templates require always or network security: ...
    (microsoft.public.win2000.security)
  • ISA 2006 Enterprise install/config questions reference NICs
    ... system will be used for outbound Internet access from clients (mostly ... The servers are called ISA1 and ISA2 ... communications only went downhill from there, ... for intra array communications between ISA1 and ISA2 okay, best practices, ...
    (microsoft.public.isa.enterprise)
  • Re: IPSec and DC
    ... Client to DC communications using IPsec is unsupported. ... DC to DC communication is supported, when using certs (not Kerberos). ... > We have two servers with windows 2000 using IIS and Biztalk instaled. ...
    (microsoft.public.security)