Re: Users Logging on to Domains

There are some applications that will not run properly unless you are logged on as a member of the domain. Some may not believe me but I can show you a sql application that will not and the tech support says join it to the domain if you want that feature to work.

If they have XP you can clean up the users local profile first by emptying temp internet files, deleting his temp files, moving his music to a different folder and then running the File and Settings wizard. Or when you connect the laptop using http://sbsservername/connectcomputer there is a profile import wizard as part of the process. This assumes SBS 2003 and XP.

John F Kappler wrote:
Thanks for the replies Chaps. I understand a little better (I think).

I am right in thinking that if I change the login from the local
computer to the domain, it will treat it as a new user and I'll have
to move all the user's files, documents, settings etc. to the "new"
user (on the PC)?

JohnK

On Wed, 3 Jan 2007 19:50:18 +1100, "SuperGumby [SBS MVP]"
<not@xxxxxxxxxxx> wrote:

and I reckon they're (these IT techs who feel the need to be off the domain) idiots.

Unless their laptops are members of the 'visited' domain it matters in what way whether they are members of a foreign workgroup or domain?

The OP's problem is that either he or his users think for some reason there is an advantage logging onto a local user account rather than the standard domain account. The only local accounts domain member PC's under my control have are, say, where the user takes it home and wants to allow his kids to use it, the user always uses his domain account but local accounts are created for the kids.

I have several non-domain PC's (VMWare test systems) reporting to and totally under the control of WSUS on my SBS, it's a simple regedit on the PC, no server change required. (OK. must test this on R2, which my SBS aint. Their existence in WSUS may lead to 'Green Check' loss, not sure.) http://www.supergumby.dyndns.org/wsusreg.htm is the note I keep about it.

"Kevin Weilbacher [SBS-MVP]" <kweilbacMVP@xxxxxxx> wrote in message news:ONss$hsLHHA.420@xxxxxxxxxxxxxxxxxxxxxxx
Many IT technicians will deliberately configure and login to their work laptops as a non-domain user, to allow easier portability going from one customer (server) to the next.

What do you lose? Well, just some things off the top of my head ... WSUS does not see non-domain PC's; you lose the ability to push down group policy changes to such systems; any Microsoft or 3rd party apps that work on validating an AD domain user won't be able to do so.

--
Kevin Weilbacher [SBS-MVP]
"The days pass by so quickly now, the nights are seldom long"


"John F Kappler" <john@xxxxxxxxxxxxxx> wrote in message news:uplkp2dcuj7ddkni8tosan6or7ps06cbnn@xxxxxxxxxx
I thought I understood this until ......

All our users are registered as users on the SBServer.

All their PCs are also added and listed.

If you go to a user PC, you log in as the Username, and the Domain
"XXXXX".

All works fine, EXCEPT one of the users doesn't do the above! They
login as the Username, but instead of the Domain they anve an entry of
"AA99 (This Computer)" - Its the name of the PC.

All the server applications work as normal, they send and receive
e-mails, they access the internet, the network attached storage, etc.
etc. In fact, if I hadn't have been logging on to their PC as
Administrator to resolve a device problem, I wouldn't have noticed the
difference.

I've resisted changing the logon to use the domain name cos I'm fairly
certain it will create a new user and I'll have to move across all
their files, settings, defaults, etc.

But it does lead me to ask the question, what does a Domain user get
that this person doesn't?

TIA,

JohnK


.

Relevant Pages

  • Re: Setting a password on an AD account...
    ... I assume it's running in a restricted account right? ... You don't use SSL to bind, and as this runs from a server which is not a domain member (a ... this one fails when the current user is not an administrator on the DC. ...
    (microsoft.public.dotnet.languages.csharp)
  • RE: Bypass Traverse Checking?
    ... Either one will satisfy your needs for your server, and IIS. ... uses the anonymous account IUSR_COMPNAME and is a member of the Guest Group. ... "ACL's" to your IUSR account it should not need this privilege. ...
    (Focus-Microsoft)
  • Re: Windows NT 4.0 BDC Upgrade
    ... >>Microsoft MVP - Windows NT Server ... >>> account ... >>>>> change a member server ... >>>>> upgrade went ...
    (microsoft.public.win2000.active_directory)
  • Re: Unable to open the Web...You are not authorized to perform the current operation
    ... in the event log on restarting the server. ... which uses a network account.) ... site in VS2005 and got the User name/Password authentication pane - I ... tried my ID (which is a member of Administrators on the server) and it ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Share Permissions and Security Groups
    ... >> storage on a member server. ... >> If the account is in no group that directly or indirectly has been ... >> resources that are controlled and add the groups of principals ... > From your comments I ensure that each Project Folder NTFS does not inherit ...
    (microsoft.public.security)
Loading