Using XP-Home in a Domain Network

I have several (18 to 20) computers on my network that are running XP-Home.   All are having trouble now accessing resources (printers, files, folders) on our domain - although a few weeks ago they did not!

My goal is this:  configure their machines to work on our network (allowing them Internet access, printing to network printers, access to programs on our Servers - basic network stuff).

I've been adding their UserName and password to Active Directory.  I'm just now adding their Computer name to the Computers Folder of A.D. too.

The problem is this:  often the UserName they have been using for a long time is not in line with our domain policy:  FirstnameL  or FirstnameLastname.  Many have been working as: Firstname Lastname (with a space).   So I have added a new user to their machines, following the domain policy, and attempted to copy over all the setting from their old profile to the new profile.

This used to work seamlessly.  Recently though I've been getting access denied errors starting with: settings on the destination folder have not been set properly.

Could you (would you) lay out the steps I should be using to easily create a new user and to migrate all the settings over from the old profile to the new (complete with the ownership issues)?

Thanks, in advance!


PS:  the following information may/may not be pertinant to the discussion but I'll add anyway.  It seems as though the "ceiling of acceptability", for wether you can participate on our network or not, has risen recently.  Users whose machines were not set up "properly" but who could still access all the resources in our domain, all-of-a-sudden were NOT permitted to do certain stuff (like print to a network printer through our print Server).  The user who attempts to access the print server is presented with a logon screen where they enter their Username and password before access is granted.  It's as though we updated our server with a new update from Microsoft that changed the level of security to a 'tighter' level.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Just a though that might Interest you regarding how to setup XP Home so it can logon to a domain.

After you setup a new username/password on the client machine I would do the following.  Log on with the new user account so it will create a profile in C:\documents and settings\username.  Now I would Reboot the machine.

Log on with the administrators account. Migrate to C:\Documents and Settings.  Ensure you go Tools -- Folder options -- View -- Show all hidden and system files

Now go into the users old username folder in Documents and settings.  Click Edit -- Select All,  Click Edit - Copy.
Now go into the users new username folder in documents and settings.  Click Edit -- Select All, and press Delete.  Once everything is deleted select edit Paste.
Reboot the Machine.  Log on with the users new account and all her all settings will be back.
JayMulkeyAuthor Commented:

Thanks for you comments.  

In your experience of doing this, has there been any times when the user can't access a program (like WORD) that they used to be able to?

No, They should still be able to access all the programs.

Have you adjusted any security permmissions on the XP Home machines or are they still using Simple file sharing?

Can they not access a program anymore?  What program is it?  What error do they get?
CompTIA Network+

Prepare for the CompTIA Network+ exam by learning how to troubleshoot, configure, and manage both wired and wireless networks.

Dmitri FarafontovLinux Systems AdminCommented:
May I point out that Simple File Sharin is the only way to share in Windows XP Home. There two kinds of permissions NTFS (which guard the file access itself) and Share Permissions (Which control access to the shared object). Unfortunately Windows XP Home doesnt allow granular control of Access Control Lists as Windows XP Pro does. You will need to use a utility called CACLS to manually rest permissions from the Safe Mode, since GUI is not available.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Just thought I would Correct DeltaFire

Simple file sharing is not the only way to shar in window xp home (assuming you hard drive is NTFS, otherwise permissions do not exist), By Default Simple file sharing is enabled.  This is why you can't see the security tab.  You can disable simple file sharing which will let you set security permissions on folders, files etc...

To disable simple file share you open My computer
Select Tools -- Folder Options -- Click the View Tab
Scroll all the way down and uncheck Simple File Sharing (Reccommended)
Dmitri FarafontovLinux Systems AdminCommented:
Advanced configuration of the Access Control List is not available in XP Home edition, since it wasnt designed for networking usage. About the only way you could see an ACL is by going through safe mode.
My bad I always thought you could do it in XP Home, Only really have exprience with XP Pro, thought it would be the same.  There are hacks to get the security feature in XP Home though.

JayMulkeyAuthor Commented:
I have not adjusted (nor do I know how) any security permissions on the machine.

After making the change, user tried to open WORD and got the "Please insert the program CD to complete the installation" window.  Also, the link on the desktop for Palm Desktop did not work.

I have reinstalled Microsoft Office and will do the Palm software next - just wish I didn't have to.
I have seen that error message before, You would of got around that by copying the profile over before you tried executing word  because her old profile already had word configured.

You will get that message if you do not do a complete install of Microsoft Office.  It needs some files off the CD to Configure word for that user.

If you do not do a full install, you can copy the CD to a network location and install it from there.  Then whenever word needs to find additional files rather than requesting for the cd it will look to the network location from which it was installed and install get the files it needs.

Dmitri FarafontovLinux Systems AdminCommented:
Well since it happened after a Service Pack update, I am some additional Access Control was enabled on the server itself
JayMulkeyAuthor Commented:

Please elaborate a bit on your last comment.  I'm not sure I understand.
Have any changes been made to any of your group policies?  Specifically in the security settings?  Its possible something was changed with the service pack update?  Just a thought, maybe it'll point you in the right direction.
Dmitri FarafontovLinux Systems AdminCommented:
Well XP Home machines were never designed to participate on a network, let alone in AD environment. It is my understanding that with the latest Service Pack Microsoft chosen to make this restriction even more granular, so users upgrade to XP pro if they want domain membership in AD.
JayMulkeyAuthor Commented:

What you are saying sounds very much like what happened to me.  I had all these XP-Home users happily working on our domain (they could print to network printers, access shared drives on the servers, etc.).  Now, after updating our domain server following an alert from Microsoft, these users can't participate in the same way.

Do you think it is an option for me to roll back the update and return to "the good old days" since I can't possible afford to buy Pro for all these folks?  

What about the xqdcXSP program mentioned earlier in this thread?  Have you ever tried that?

Dmitri FarafontovLinux Systems AdminCommented:
Here is something I dag out on Google:

It is an option if you chosen to backup files into an archive upon Service Pack installation.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.