Securing Using Domain Accounts on Non-Domain Computers

[Guest K]

An odd question I know, but I have a lot of remote sites who are not domain

connected and are in workgroups. These will soon be connected to head

office using VPN for remote admin purposes.

 

Is there any way on the workgroup PC I can add a security group from the

head office domain into the local admin group on the workgroup PCs, so the

select users can authenticate against the workgroup PC when logged onto

their domain-based head office PC?

[Guest Anthony]

Re: Securing Using Domain Accounts on Non-Domain Computers

 

K,

No. The workgroup PC can not recognise domain groups. Can you give an

example of what you are trying to achieve?

Anthony, http://www.airdesk.com

 

 

"K" <nospam@nospam.com> wrote in message

news:OtKTE$NLIHA.3848@TK2MSFTNGP05.phx.gbl...

> An odd question I know, but I have a lot of remote sites who are not

> domain connected and are in workgroups. These will soon be connected to

> head office using VPN for remote admin purposes.

>

> Is there any way on the workgroup PC I can add a security group from the

> head office domain into the local admin group on the workgroup PCs, so the

> select users can authenticate against the workgroup PC when logged onto

> their domain-based head office PC?

>

[Guest K]

Re: Securing Using Domain Accounts on Non-Domain Computers

 

We want to access remote shares (without having to have local accounts to

authenticate against) and also have a remote admin utility which can either

use local security or domain security - didn't want to have to go round each

PC setting up users just for this if we could pass the domain credentials

though to it.

 

"Anthony" <anthony.spam@spammedout.com> wrote in message

news:uhq1%23JOLIHA.4272@TK2MSFTNGP05.phx.gbl...

> K,

> No. The workgroup PC can not recognise domain groups. Can you give an

> example of what you are trying to achieve?

> Anthony, http://www.airdesk.com

>

>

> "K" <nospam@nospam.com> wrote in message

> news:OtKTE$NLIHA.3848@TK2MSFTNGP05.phx.gbl...

>> An odd question I know, but I have a lot of remote sites who are not

>> domain connected and are in workgroups. These will soon be connected to

>> head office using VPN for remote admin purposes.

>>

>> Is there any way on the workgroup PC I can add a security group from the

>> head office domain into the local admin group on the workgroup PCs, so

>> the select users can authenticate against the workgroup PC when logged

>> onto their domain-based head office PC?

>>

>

>

[Guest Anthony]

Re: Securing Using Domain Accounts on Non-Domain Computers

 

Hi K,

I guess what you are trying to do is create a "domain" without having domain

controllers at the smaller sites. That's a common dilemma and keeping them

in a workgroup is reasonable for the smallest sites.

Accessing remote shares is going to be difficult without a real domain. The

only way I can think you might do this is to have a common user name and

password, but that gives you very poor security. Really the approach that

remote sites have data the centre needs seems the wrong way round. If the

data is needed across the organisation, you'd expect to put it in the

centre, perhaps make it available over terminal services. If its a very

specialised purpose (say, pulling in specific data) I suppose you might look

at a scheduled task to copy it over the VPN.

Remote admin, installing software etc: the best way to do this would be to

install an agent on PC's so you can manage them. Something like the Altiris

client agent would do that for you. Once it is on, you can do anything you

need to,

Hope that helps,

Anthony, http://www.airdesk.com

 

 

 

"K" <nospam@nospam.com> wrote in message

news:%23tXXHTOLIHA.3916@TK2MSFTNGP02.phx.gbl...

> We want to access remote shares (without having to have local accounts to

> authenticate against) and also have a remote admin utility which can

> either use local security or domain security - didn't want to have to go

> round each PC setting up users just for this if we could pass the domain

> credentials though to it.

>

> "Anthony" <anthony.spam@spammedout.com> wrote in message

> news:uhq1%23JOLIHA.4272@TK2MSFTNGP05.phx.gbl...

>> K,

>> No. The workgroup PC can not recognise domain groups. Can you give an

>> example of what you are trying to achieve?

>> Anthony, http://www.airdesk.com

>>

>>

>> "K" <nospam@nospam.com> wrote in message

>> news:OtKTE$NLIHA.3848@TK2MSFTNGP05.phx.gbl...

>>> An odd question I know, but I have a lot of remote sites who are not

>>> domain connected and are in workgroups. These will soon be connected to

>>> head office using VPN for remote admin purposes.

>>>

>>> Is there any way on the workgroup PC I can add a security group from the

>>> head office domain into the local admin group on the workgroup PCs, so

>>> the select users can authenticate against the workgroup PC when logged

>>> onto their domain-based head office PC?

>>>

>>

>>

>

>