Setting up AD in a small office...

  • Thread starter Thread starter sethcoop
  • Start date Start date
S

sethcoop

I have a network with 5 pc's... i have a win 2003 server that I am
thinking about setting up AD on. My users are not very computer savy
and security isn't so great that we need to lock each workstation all
the time. My question is can I set up an AD and join the computer to
the domain with out having to have the user login all the time. Can
the username and password be stored on the computer?

Thanks,
Seth Cooper
 
I have a network with 5 pc's... i have a win 2003 server that I am
thinking about setting up AD on. My users are not very computer savy
and security isn't so great that we need to lock each workstation all
the time. My question is can I set up an AD and join the computer to
the domain with out having to have the user login all the time. Can
the username and password be stored on the computer?

Thanks,
Seth Cooper

No. Once computers are joined to a domain users will have to log on
using their domain credentials (if they are logging into the domain -
they can still log into their local accounts, but then what would be the
point of the domain?). Why install a central management/security model
and then immediately try to defeat the features. AD can be used to
centrally lock down workstations IF you know what you are doing. It can
also be used to lock everyone (including yourself )out of everything
with no recourse but to re-install. Before you even think about going to
a domain model, buy a good book on basic AD administration and read it.
Particularly the undesired effects of group policy.

....kurt
 
I have a network with 5 pc's... i have a win 2003 server that I am
thinking about setting up AD on. My users are not very computer savy
and security isn't so great that we need to lock each workstation all
the time. My question is can I set up an AD and join the computer to
the domain with out having to have the user login all the time. Can
the username and password be stored on the computer?

Yes, but it is NOT a good practice and logging on takes only a moment
which you users will become used to doing.

Personally I don't believe a password less than 15 characters is secure
enough and although most people groan when first hearing that, everyone
adapts within a day or two.
 
I have a network with 5 pc's... i have a win 2003 server that I am
thinking about setting up AD on. My users are not very computer savy
and security isn't so great that we need to lock each workstation all
the time. My question is can I set up an AD and join the computer to
the domain with out having to have the user login all the time.

If you do this, why bother with the domain configuration?
Can
the username and password be stored on the computer?

The last logged on username, yes. By default. Password? No.
 
You can still logon locally, even if joined to a domain. You just won't
have access to domain resources.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top