jdindo01
asked on
Setting up a Win2K workstation as I would a Win98 workstation on NT domain
Can someone please provide me with directions to setup a win2k workstation so that it ehaves much like a win98 workstation would on NT domain? I have a dedicated NT server as a PDC on a LAN with 12 win95/98 workstations. As soon as I added Win2K workstations, I found that I had difficulty getting them to logon to the network. Each Win95/98 workstation has a unique name and logs onto the network with a password; the username/password combo is setup on the NT PDC. TIA
I think you're in for a rude awakening.
There is actually no similarity between the way Win2000 workstations participate in an NT DOMAIN and the way Win98 machines do. It only looks similar to the unsuspecting user. You, as the system administrator, should know better.
Win98 is a completely unsecured operating system and so the NT DOMAIN "membership" is by definition also unsecured. Any Win98 computer can be a part of any NT Domain without restrictions.
W2K is secured and when a W2K workstation is a part of an NT DOMAIN, the user authentication function is controlled by the DOMAIN. In order to join a W2K workstation to the domain you MUST HAVE the "Add Workstation to Domain" privilege on your DOMAIN USER ACCOUNT. So generally you must logon as Administrator to join to the domain. After that, any user logon to the W2K workstation will use the DOMAIN ACCOUNT and not the local account. So you must create user accounts for each user of the W2K machine on the domain.
There is actually no similarity between the way Win2000 workstations participate in an NT DOMAIN and the way Win98 machines do. It only looks similar to the unsuspecting user. You, as the system administrator, should know better.
Win98 is a completely unsecured operating system and so the NT DOMAIN "membership" is by definition also unsecured. Any Win98 computer can be a part of any NT Domain without restrictions.
W2K is secured and when a W2K workstation is a part of an NT DOMAIN, the user authentication function is controlled by the DOMAIN. In order to join a W2K workstation to the domain you MUST HAVE the "Add Workstation to Domain" privilege on your DOMAIN USER ACCOUNT. So generally you must logon as Administrator to join to the domain. After that, any user logon to the W2K workstation will use the DOMAIN ACCOUNT and not the local account. So you must create user accounts for each user of the W2K machine on the domain.
ASKER
Please clarify:
"In order to join a W2K workstation to the domain you MUST HAVE the "Add Workstation to Domain" privilege on your DOMAIN USER ACCOUNT. "
In referring to a "DOMAIN USER ACCOUNT" is that an account on the server or on the workstation. I am guessing the latter which then violates a rule that I have read that you should not logon as Administrator to the workstation all the time. Any thought?
"In order to join a W2K workstation to the domain you MUST HAVE the "Add Workstation to Domain" privilege on your DOMAIN USER ACCOUNT. "
In referring to a "DOMAIN USER ACCOUNT" is that an account on the server or on the workstation. I am guessing the latter which then violates a rule that I have read that you should not logon as Administrator to the workstation all the time. Any thought?
JD, in order to add users, and assign rights, you must be logged on either as an admin, or do so with scripts externally. In this case, logon as an admin, create your user(s) and then log off.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks again for the help. Your comments are not at all insulting. So, let me make sure I understand:
- setup an account on the PDC with the same username as the Win2K machine name
- setup the win2k workstation so that it is a member of the domain
- setup an account on the workstation? this is where I am not clear
I would like to have the user log on and have access to domain and local resources at the same time.
JD
- setup an account on the PDC with the same username as the Win2K machine name
- setup the win2k workstation so that it is a member of the domain
- setup an account on the workstation? this is where I am not clear
I would like to have the user log on and have access to domain and local resources at the same time.
JD
JD, the account you setup on the workstation needs to be the same as the share created on the server. The term setting up an account means setting up a user name and password a/k/a profile.
Dennis