Re: Access Data on a Domain Server Using Workgroup Access - How?

From: Bill Sanderson (Bill_Sanderson@msn.com.plugh.org)
Date: 11/28/02 

From: "Bill Sanderson" <Bill_Sanderson@msn.com.plugh.org>
Date: Wed, 27 Nov 2002 21:17:57 -0500

I'm not quite sure what your question is.

You can "access data on a domain server" with an XP Home machine, which is
incapable of joining the domain.

You can also do the same with an XP Pro machine which hasn't joined the
domain--I do this daily in both NT4 domains and Windows 2000 AD domains.

Just present credentials which allow access to the specific resources you
need access to.

You can specify the domain name as part of the credentials in two ways:

username@domainname (windows 2000 only)
domainame\username (NT or Windows 2000)

You can also do this at the command line level with the NET USE command.

"Slarty Bartfast" <Slarty@Bartfast.com> wrote in message
news:#1t9gvmlCHA.2116@tkmsftngp07...
> I want to create a WORKGROUP that can access resources on the DOMAIN.
>
> When a Windows95/98 Workgroup client tries to access a Domain share, it
> lets
> me in using the Workgroup Username - using the same username and password
> for the Workgroup as on the Domain. (The Workgroup name is the same as the
> Domain name if that helps).
>
> When an NT or 2000 Workgroup client tries to access a Domain share, it
> asks
> for the Local Admin username and password, I'm not presented with the
> logon
> screen where you enter Domain username, password and Domain.
>
>
> I saw this on a Web Site;
> What he says works for Window95, but the Domain validation it asks for
> with
> NT4/2000 clients is only the 'local machine' validation, not the PDC
> validation.
>
> http://prezentacije.www.yu/mann/books/NT4Server/ch14.htm#E70E18
> "Even if a user logs onto a workstation that is set to only provide
> workgroup-level validation, he still can access domain resources if he has
> a
> valid domain name and password. If Ben Franklin had been a valid user to
> the
> PDC but the Windows 95 workstation he had been logging onto was set up as
> a
> workgroup machine, he still would be granted access to domain resources
> when
> he attempted to access or view them. NT machines demand validation of a
> workgroup user by a PDC using the current logon name and password from the
> workgroup machine. If the workgroup machine provides a valid user name and
> password (determined by the PDC), the user is granted permission to use a
> domain resource. This permission, however, is determined only at the point
> when the user attempts to access domain-controlled network resources. As
> stated earlier, just logging onto a workgroup machine does not provide
> network authorization at that point."
>
> Any suggestions please?
> --
>
> Regards,
> Slarty Bartfast
>
>
>
>
>

Quantcast