Access Data on a Domain Server Using Workgroup Access - How?

From: Slarty Bartfast (Slarty@Bartfast.com)
Date: 11/28/02 

From: "Slarty Bartfast" <Slarty@Bartfast.com>
Date: Thu, 28 Nov 2002 10:23:47 +1100

I want to create a WORKGROUP that can access resources on the DOMAIN.

When a Windows95/98 Workgroup client tries to access a Domain share, it lets
me in using the Workgroup Username - using the same username and password
for the Workgroup as on the Domain. (The Workgroup name is the same as the
Domain name if that helps).

When an NT or 2000 Workgroup client tries to access a Domain share, it asks
for the Local Admin username and password, I'm not presented with the logon
screen where you enter Domain username, password and Domain.

I saw this on a Web Site;
What he says works for Window95, but the Domain validation it asks for with
NT4/2000 clients is only the 'local machine' validation, not the PDC
validation.

http://prezentacije.www.yu/mann/books/NT4Server/ch14.htm#E70E18
"Even if a user logs onto a workstation that is set to only provide
workgroup-level validation, he still can access domain resources if he has a
valid domain name and password. If Ben Franklin had been a valid user to the
PDC but the Windows 95 workstation he had been logging onto was set up as a
workgroup machine, he still would be granted access to domain resources when
he attempted to access or view them. NT machines demand validation of a
workgroup user by a PDC using the current logon name and password from the
workgroup machine. If the workgroup machine provides a valid user name and
password (determined by the PDC), the user is granted permission to use a
domain resource. This permission, however, is determined only at the point
when the user attempts to access domain-controlled network resources. As
stated earlier, just logging onto a workgroup machine does not provide
network authorization at that point."

Any suggestions please? 

--
Regards,
Slarty Bartfast

Relevant Pages

  • Re: Windows 2003 and subsequent Home Network issues
    ... because of the lack of a central authority in a workgroup. ... A domain login would be all you ... > not give a user the right to access domain resources. ... > If you want to access local resources while logged onto the domain, ...
    (microsoft.public.windows.server.networking)
  • Re: Workgroup Messaging Message Configuration
    ... Server when trying to use the workgroup features. ... The first time I did that, a status request was ... Resources assigned to tasks. ...
    (microsoft.public.project)
  • Re: Can I use workgroup email in project 2003
    ... It's been awhile since I used the workgroup email features but see if any of ... Once you have assigned your resources - to inform the resources of their ... assignments, ... Workgroup tool anywhere in my menus or tools options. ...
    (microsoft.public.project)
  • Re: Changed to Workgroup, Now cannot log on
    ... I have no problems accessing workgroup resources ... on WIN2K machines from an XP machine but I have never been ... My Business Laptop running XP Professional. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Windows 2003 and subsequent Home Network issues
    ... A logon to a local machine/workgroup does not ... A logon to a domain does not give you access to workgroup resources. ... Your domain login credentials will be accepted ...
    (microsoft.public.windows.server.networking)