Guest K Posted November 22, 2007 Posted November 22, 2007 An odd question I know, but I have a lot of remote sites who are not domain connected and are in workgroups. These will soon be connected to head office using VPN for remote admin purposes. Is there any way on the workgroup PC I can add a security group from the head office domain into the local admin group on the workgroup PCs, so the select users can authenticate against the workgroup PC when logged onto their domain-based head office PC?
Guest Anthony Posted November 22, 2007 Posted November 22, 2007 Re: Securing Using Domain Accounts on Non-Domain Computers K, No. The workgroup PC can not recognise domain groups. Can you give an example of what you are trying to achieve? Anthony, http://www.airdesk.com "K" <nospam@nospam.com> wrote in message news:OtKTE$NLIHA.3848@TK2MSFTNGP05.phx.gbl... > An odd question I know, but I have a lot of remote sites who are not > domain connected and are in workgroups. These will soon be connected to > head office using VPN for remote admin purposes. > > Is there any way on the workgroup PC I can add a security group from the > head office domain into the local admin group on the workgroup PCs, so the > select users can authenticate against the workgroup PC when logged onto > their domain-based head office PC? >
Guest K Posted November 22, 2007 Posted November 22, 2007 Re: Securing Using Domain Accounts on Non-Domain Computers We want to access remote shares (without having to have local accounts to authenticate against) and also have a remote admin utility which can either use local security or domain security - didn't want to have to go round each PC setting up users just for this if we could pass the domain credentials though to it. "Anthony" <anthony.spam@spammedout.com> wrote in message news:uhq1%23JOLIHA.4272@TK2MSFTNGP05.phx.gbl... > K, > No. The workgroup PC can not recognise domain groups. Can you give an > example of what you are trying to achieve? > Anthony, http://www.airdesk.com > > > "K" <nospam@nospam.com> wrote in message > news:OtKTE$NLIHA.3848@TK2MSFTNGP05.phx.gbl... >> An odd question I know, but I have a lot of remote sites who are not >> domain connected and are in workgroups. These will soon be connected to >> head office using VPN for remote admin purposes. >> >> Is there any way on the workgroup PC I can add a security group from the >> head office domain into the local admin group on the workgroup PCs, so >> the select users can authenticate against the workgroup PC when logged >> onto their domain-based head office PC? >> > >
Guest Anthony Posted November 22, 2007 Posted November 22, 2007 Re: Securing Using Domain Accounts on Non-Domain Computers Hi K, I guess what you are trying to do is create a "domain" without having domain controllers at the smaller sites. That's a common dilemma and keeping them in a workgroup is reasonable for the smallest sites. Accessing remote shares is going to be difficult without a real domain. The only way I can think you might do this is to have a common user name and password, but that gives you very poor security. Really the approach that remote sites have data the centre needs seems the wrong way round. If the data is needed across the organisation, you'd expect to put it in the centre, perhaps make it available over terminal services. If its a very specialised purpose (say, pulling in specific data) I suppose you might look at a scheduled task to copy it over the VPN. Remote admin, installing software etc: the best way to do this would be to install an agent on PC's so you can manage them. Something like the Altiris client agent would do that for you. Once it is on, you can do anything you need to, Hope that helps, Anthony, http://www.airdesk.com "K" <nospam@nospam.com> wrote in message news:%23tXXHTOLIHA.3916@TK2MSFTNGP02.phx.gbl... > We want to access remote shares (without having to have local accounts to > authenticate against) and also have a remote admin utility which can > either use local security or domain security - didn't want to have to go > round each PC setting up users just for this if we could pass the domain > credentials though to it. > > "Anthony" <anthony.spam@spammedout.com> wrote in message > news:uhq1%23JOLIHA.4272@TK2MSFTNGP05.phx.gbl... >> K, >> No. The workgroup PC can not recognise domain groups. Can you give an >> example of what you are trying to achieve? >> Anthony, http://www.airdesk.com >> >> >> "K" <nospam@nospam.com> wrote in message >> news:OtKTE$NLIHA.3848@TK2MSFTNGP05.phx.gbl... >>> An odd question I know, but I have a lot of remote sites who are not >>> domain connected and are in workgroups. These will soon be connected to >>> head office using VPN for remote admin purposes. >>> >>> Is there any way on the workgroup PC I can add a security group from the >>> head office domain into the local admin group on the workgroup PCs, so >>> the select users can authenticate against the workgroup PC when logged >>> onto their domain-based head office PC? >>> >> >> > >
Recommended Posts