Create a workgroup within an established domain

BHTN
BHTN used Ask the Experts™
on
Hello EE,

I would like to create a 3 PC workgroup within an established domain.  Here are some specifics:

- Local network has RODC only (DNS)
- When link between local network and overseas corporate network goes down, all systems can no longer access locally shared resources.  The overseas support department basically refuses to address the issue after multiple requests.
- During these interruptions, our production systems can no longer access our common drive to pull files from that are used to manufacturer parts.
- I will be using a Windows 7 Professional system as a file server for the other 2 PCs that will be running Windows XP.
- I want to create a separate workgroup so that these systems will continue to function as expected, even when the link goes down.
- I would also like to allow these 3 PCs to be able to access printers on the domain.
- Last time we were down, we lost 7 hours of production time.

Any suggestions are welcomed.

Thank you
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
ok you must be over a VPN with domain controlled on the overseas end right?

Author

Commented:
We connect overseas via an MPLS connection.  
ok ... now tell me does all the three PCs have internet connection separate from the domain?
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

Author

Commented:
They could.  I have two gateways...one is for the MPLS and overseas domain connectivity, the other is utilizing Comcast (I send specific PC's internet traffic over that connection).  
ok... now there are two solutions ... one is if you have single IP of Comcast .... install a managed router .... Plug all the 3 PCs in and you will be on a same LAN with Comcast Internet connection ....

the other one is to install Hamachi... Its free for file sharing purpose

https://secure.logmein.com/products/hamachi2/default.aspx

create a managed network and select mesh topology in it ... and deploy from the host pc to other two .... though you would be utilizing the internet for file sharing in this method
when the link is down ... you will only have to use the local admins in order to access each other.... though i would prefer using the same passoword and usernames for all three local admins

Author

Commented:
Thanks nava...but, sitting these PCs on Comcast...how would I be able to share the printers on the domain? NET USE?  

The IP address scheme on the domain is:  10.1.17.X
The Comcast IP address scheme for clients is: 10.1.11.X

I don't want to make this too complicated :)  Plus, I don't have a managed router handy...

Thanks!

Author

Commented:
Yes, I agree with that regarding the local admin accounts.  Whether the link is up or down, I want these 3 systems to be oblivious to it.  I know that the network printers won't be available when the link is down, but I can live with that.
ok leaving the router scenario out ... install hamachi.... when you will set it up... it will create a VPN and a separate IPs will be assigned to all the 3 PCs from separate scheme....Since you will be able to use the internet from local admin ... all you will then have to do is to access the local shares from the IP that will be assigned by hamachi

Author

Commented:
Ok...I think I get what you are saying.  I will check out Hamachi in the morning if that's ok.  Got to get the kiddies :)  Once I read into that a bit more, I will post my results.

Thanks nava!
no prob... be sure to create the managed network .. when trying hamachi .. it gives u a lot of control ... and when it works , it does the job very well

Author

Commented:
Hi nava,

Ok, I've downloaded Hamachi, installed it once on my file share PC and choose the option of Mesh network.  I've also pointed the original network card to the Comcast Gateway.  I noted that there is a new network connection that utilizes a 5.241.x.x network.  I'm assuming that this IP address is for the Hamachi network?

Is there anyway that you can think of where I could have these 3 systems physically connected on the domain, but assigned 3 169.x.x.x IP addresses that are independent of the domain's IP address scheme?  In addition, just allow these 3 systems to talk to each other exclusively?  I know I could do this if they were all 3 physically connected to a switch all by themselves.  I just want to use my local physical network instead of moving the file PC out into the production area.

Hope that makes some sense :)

Thanks!
yes that 5.241.x.x address scheme is from hamachi... why you want to assign 169.x.x.x scheme when you can connect the other two PC using Hamachi... The VPN shares not only will behave EXACTLY like PHYSICAL LAN but also the security will be the same.... on the other hand ..... there is a thing you might do if all the 3 PCs are physically connected to each other ... try adding additional ip address to each of them ... on the similar NICs by going through network  connection's properties ... TCP IP settings ... properties.... Advanced... and assign IP addresses the way you want on all the 3 machines .. in the similar way... be sure the subnet and ip scheme should be the same ... try that... it might just work to create a private network

by the way ... installing hamachi in other two and connecting it the network created by your share PC will bind all of them on the same IP scheme on a separate connection.... so you can even ping ... or share anything u want.... just like in LAN ... its like a Virtual LAN over Internet ...

Author

Commented:
Gotcha!  So, one last question before I embark on this journey...if I were to multihome those 3 PCs with the domain IPs as the primary IP addersses and then add the 192.x.x.x IP addersses, would those 3 PC still communicate on the 192.x.x.x subnet if the domain isn't functioning correctly?

Thanks!
logically they should PING to each other fine i.e IF THEY ARE on a SAME PHYSICAL NETWORK that means they will communicate ... as far as the SHARES are concerned.... i think it should work when using LOCAL admins... if not .... try accessing the shares with their newly assigned IP addresses i.e \\(Ip add)\sharename

Author

Commented:
Great!  Thanks nava...I'll work on this tonight and tomorrow morning and report back.  Fingers crossed!
ok... still if that doesn't work ... we have the hamachi option... i have used hamachi myself..... dats why m certain abt it

Author

Commented:
Hi nava,

So sorry for the delay.  You know how IT is...what is on fire gets immediate attention!  When I first started this effort, this was hot.  Now, not so much.  It appears that my overseas counterparts have 'fixed' the problem.  We tested it this weekend and found that their efforts fixed the problem.  

Just wanted to apologize for the delay and let you know I won't be needing this solution after all.

Thanks!
no prob... its good to know the problem is solved

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial