Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 387
  • Last Modified:

Advice required before joining laptops to new SBS2008 domain

Hello

I have just setup a new SBS2008 domain. The purpose of this is to manage files and permissions, printer sharing and exchange email boxes.

Our company has 3 desktops and 4 laptops. The laptop users are usually out of the office a lot and require access to email.

It is advisable / required for the laptops to join the domain? I read a lot of articles of where people have problems with the profiles on the laptop when they are not connected to domain, i.e. no domain present to log into...

Any advice appreciated...
0
herculesway
Asked:
herculesway
  • 2
2 Solutions
 
woodmouseCommented:
I generally try not to use a roaming profile for laptop users... but other than that, they are joined to the domain.
For antivirus and WSUS to be working like I want.

Kind regards,
Michel
0
 
knightfrankCommented:
It depends on your requirements to if you need to join the domain.

If all they're after is e-mail, they don't need to be a member, though they will get an authentication prompt when launching Outlook to connect to Exchange.

If you want to map drives, apply policies, AV and WSUS as said above, it is recommended to be a member of the domain.

Joining the domain will create an entire new profile on the workstation, though you can easily associate the domain user to the old profile using the MOVEUSER.exe tool from Microsoft.

As long as the user connects to the domain within 10 days, they will be able to log on without issue. Workstation cached credentials time out after 10 days, at that point, you can no longer log on without being connected to the domain.
0
 
Rob WilliamsCommented:
If the laptops are in the office at all I recommend joining the domain. This will automatically apply your group policies, install any self signed certificate, configure Outlook,  install windows updates, report status to the SBS console, and sync their my documents for backup purposes. Make sure you use the http://connect wizard when joining.

As for cached credentials "timing out", I have never heard of that. Some of my client laptops have been using cached credentials for more than a year.
0
 
woodmouseCommented:
I can only speak for windows servers being virtualized for backup-reasons... and they are sitting at home, with cached credentials for over 6 months now... and they still logon with the old password (in the meantime the password at the office has changed already)

So I didn't hear about thos 10 days either... but you can, using policies ofcourse !
0

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now