Re: Multiple domains on a computer




<jim_patterson@xxxxxxxxxxx> wrote in message
news:1155167477.442277.230350@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I have a laptop user who is going to another site with MS domain
controller. And they currently want to make his computer part of that
domain. This is XP and I was wondering if it will allow the computer
to be apart of 2 different domains or once he comes back will I have to
set him back up on this domain so that he can login.

Basically I'm concerned that when he comes back and tries to login,
will he have a drop down window that says
domain <thiscomputer>
<domain1>
<domain2>

I do realize that <User1><Domain1> and <User1><Domain2> are completely
different users, but that's another problem. What they want to do is
give him limited access in <domain2>.


No, a computer can only be a member of one domain at a time. Once it is
removed, the old domain should disappear from the login dropdown box. (It's
possible to have many domains listed in that box: it will show the domain
that the computer is a member of as well as the domains that are trusted by
that domain.)

Strictly speaking, his system doesn't need to be a member of the other
site's domain for him to access resources on that domain. In most cases he
can just map a drive letter to the share on their server and check the box
to "connect using a different user name" and then provide the name and
password of the user account that the site IT gives to him. Even though he
would have no connectivity to the home domain, he could still log in to the
laptop with the same account due to cached credentials (unless this has been
disabled by policy.) Joining a computer to a domain is really a way of
saying that you want that domain's administrators to manage the computer.
By joining it, group policy settings and software installations may take
place that will not necessarily be reversed when he comes back home.


--
Colin Nash
Microsoft MVP
Windows Shell/User


.



Relevant Pages

  • Re: sp_revoke login is not working as expected.
    ... EXEC xp_logininfo 'MyDomain\SomeUserAccount','members' ... Try specifying a group member rather than the group. ... This should list the Windows groups the user can connect with. ... connect with the non-existing login. ...
    (microsoft.public.sqlserver.security)
  • Re: Repost: Local logon and Network Access settings
    ... > think require network login since they are over the wire do in fact ... In the default situation, Authenticated Users ... > is a member of User on a member machine, and, Users are granted ... > user accounts that should be allowed to log into the machines in SomeOU. ...
    (microsoft.public.windows.group_policy)
  • Re: fmw : link between logins and cards
    ... and i have made a login/password belonging to this group, for each member ... j'ai une table dans laquelle j'ai une fiche par adherent, ... correspondant au login de cet adherent ... j'ai fait un groupe pour les adherents, j'ai fait les reglages pour les ...
    (comp.databases.filemaker)
  • Re: cannot acees two databases as owner
    ... it does not matter you are a member of the ... the sysadmin fixed server role or if there is no any other Login which is ... group if it's a domain) and you can login to your SQL Server with, ...
    (microsoft.public.sqlserver.setup)
  • Re: The Best of RADP?
    ... MEMBER because a) I needed something else in the circle and b) I ... TDC members joining every week. ... I created an FDC/TDC group on LinkedIn. ...
    (rec.arts.disney.parks)