Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.
Course Of The Month
10 days, 9 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Connecting to a domain
Posted on 2004-08-20
I have a laptop user from another company who I would like to be able to make a part of our domain when he visits.
His domain is: QU
Our domain is: HS
What is the best way to connect him to our domain? I know I could go in on his laptop and join him to our domain when he visits, but is there a way I can trust him domain to ours??
Thanks
His domain is: QU
Our domain is: HS
What is the best way to connect him to our domain? I know I could go in on his laptop and join him to our domain when he visits, but is there a way I can trust him domain to ours??
Thanks
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
4
3-
2
- +1
10 Comments
you can set up a trust between the 2 domains in active directory domains and trust snap in,,,, or you could join him to your domain like you mentioned,,, but remember,,, a computer cannot be a member of 2 domains at the same time,, even with 3rd party tools..
the computer doesnt need to be a member of 2 at the same time
I couldnt find where to add a trust in active directory. I am using Win 2003 SBS
I couldnt find where to add a trust in active directory. I am using Win 2003 SBS
then i doubt SBS has trust capability then,,,,, you could try logging the user in with username@domain.com in the username field.
SBS doesn't have trust capabilities.
The only way that you are going to make this work is for the user to have local admin rights and know the local admin password and have the relevant rights on both your domain and the remote domain.
Comes to you, drops the machine out of the other domain, reboots, connects to your domain.
Then when he goes back to the other site, the process needs to be repeated.
No other way round it I am afraid.
Simon.
The only way that you are going to make this work is for the user to have local admin rights and know the local admin password and have the relevant rights on both your domain and the remote domain.
Comes to you, drops the machine out of the other domain, reboots, connects to your domain.
Then when he goes back to the other site, the process needs to be repeated.
No other way round it I am afraid.
Simon.
That is standard part of the AD tool set. It doesn't just deal with trusts, but other aspects of the domain.
Simon.
Simon.
Like Sembee said "SBS doesn't have trust capabilities" so NO it will not work. I think we have answered your initial question haven't we????
You could use AD delegation and netdom command to give your visitor the ability to join his laptop to your domain.
Create an OU and a computer account for the laptop.
Give the user account that your visitor uses in your domain permission to join his laptop to domain (using ADUC delegate wizard in the laptop OU)
Then use command 'netdom join /domain:yourdomain /userd:visitor's_account /passwordd:*' at laptop to join it to your domain. You could create a shortcut from the command.
hope this helps
Create an OU and a computer account for the laptop.
Give the user account that your visitor uses in your domain permission to join his laptop to domain (using ADUC delegate wizard in the laptop OU)
Then use command 'netdom join /domain:yourdomain /userd:visitor's_account /passwordd:*' at laptop to join it to your domain. You could create a shortcut from the command.
hope this helps
Featured Post
Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
by Batuhan Cetin
In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment.
These steps are not necessary in a Win…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses
Earn Certification
HTML5 Specialist - Certification
Free withPremium
Course of the Month10 days, 9 hours left to enroll
628 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.