how do you create a work group when you already have a domain

I have windows 2000 running as a primary domain controler with dns activated.  I specify a static ip address and I have a number of other machine running xp pro and vista business connecting to each other (also with static ip addresses) which is working fine.

I would like to setup a workgroup so that a number of xp and vista home macines can be seen on the network but I do nto want to disrupt my domain or break teh connections that I already have.  is this possible?

how do I setup a workgroup, and how do I connect to this workgroup if I am a member of the primary domain (ie how does the xp/vista pro machines connect to the xp/vista home machines and vice versa)

can you have a workgroup and a domain under the same umbrella (so to speak) if not what are my simple alternatives to acheiving my desired result?

thanks in advance
CiaranGAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LauraEHunterMVPCommented:
You can configure a workgroup by simply configuring a unique workgroup name for the machines in question.  Domain-joined users will need a local username/password to access resources on any workgroup-joined machines, just like other workgroup members.

This will not "disrupt" anything, but I fail to see how it does anything but create additional complexity for your environment. Machines in a workgroup environment cannot be managed via Group Policy, and do not enjoy the centralized authentication service provided by AD.
Henrik JohanssonSystems engineerCommented:
Configure all computers to use same WINS server.
It may be necessary to also activate NetBIOS over TCP/IP (WINS-tab in TCP/IP-settings).
Configure the standalone clients to use a common name for its workgroup ('computer name'-tab under 'system properties').

Why are you using static IP configuration on the clients? DHCP will simplify when nead to change any TCP/IP-setting (WINS-server, DNS-server etc).

CiaranGAuthor Commented:
LauraEHunterMVP:
ho do I create this workgroup, and if this is too complex ho would you suggest that I acheive me goal?
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

Henrik JohanssonSystems engineerCommented:
You configure the clients through right-click 'My computer'->Properties->'Computer name'-tab. Click on 'Change'-button and fill in name for the workgroup in the input field.
As Laura said, it's better to join the clients to the domain, but you nead to upgrade the Home-OS to Pro-version to be able to join the domain.
CiaranGAuthor Commented:
HenJoh
I will not be in a position to upgrade the machines to the Pro versions so the workgroup is the way forward

you have described how to connect to a workgroup - i need to know how to create a workgroup!
LauraEHunterMVPCommented:
You will create a workgroup by following henhoj's comment 21873152 - simply configure each machine in question with the same workgroup name.
CiaranGAuthor Commented:
Laura
so on each of the machiens I just enter in the same work goup name - I do not need to configure this workgroup on the server.  is this correct?
can the machines who are on the domain also connect to the workgroup?
Henrik JohanssonSystems engineerCommented:
The computers are either member of a domain or a workgroup.
LauraEHunterMVPCommented:
There is no "server" configuration involved in creating a workgroup; that's what makes it a workgroup.
CiaranGAuthor Commented:
is there any way that the home machines could see the machines on the pro domain - and vice versa?  what do you recommend other than upgrading the home machines
LauraEHunterMVPCommented:
This is a separate question, has nothing to do with workgroup vs. domain.  As long as you have name resolution in place as described earlier, you can share files/folders on any computer.  Domain-joined computers can secure files/folders using AD accounts; workgroup-configured computers will need to configure a local user account on each computer that is hosting resources.
Henrik JohanssonSystems engineerCommented:
Use the same WINS-server. Enable NetBIOS over TCP/IP

The computers outside of the domain will see the computers in the domain, but propably not access any resources when they're not authenticated to the domain. The same thing the other way.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.