Andy Lacey
andy at minstersystems.co.uk
Tue Sep 7 01:46:15 CDT 2004
Interesting. I'll try that. Andy > -----Original Message----- > From: dba-tech-bounces at databaseadvisors.com > [mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of Drew Wutka > Sent: 06 September 2004 22:43 > To: Discussion of Hardware and Software issues > Subject: RE: [dba-Tech] WXP Connecting Mobiles > > > NT based clients (NT 4.0, W2k pro, XP Pro) all cache a users > credentials, so if a user logs on, with their domain account, > and the domain is not available, they will be 'logged' in > with their cached credentials. You do not have to be on the > domain to log in with your domain account, except, obviously, > for their first login for that account (after that, the > credentials are cached....) > > Drew > > -----Original Message----- > From: dba-tech-bounces at databaseadvisors.com > [mailto:dba-tech-bounces at databaseadvisors.com]On Behalf Of Andy Lacey > Sent: Monday, September 06, 2004 3:54 PM > To: 'Discussion of Hardware and Software issues' > Subject: RE: [dba-Tech] WXP Connecting Mobiles > > > I'm probably wrong here Drew, but if the only profile on the > laptop is their network one then how do they logon when > they're away from the network? As I understood it, to connect > to the network and have everything operate well, and attract > domain security, etc, etc he must logon as a domain user, but > logging-on as a domain user will fail when not connected > won't it? That's why I thought he'd need a local and a domain > profile. From what you're saying you do I suspect I'm wrong > (usually am) but I don't see how. > > -- Andy Lacey > http://www.minstersystems.co.uk > > > -----Original Message----- > > From: dba-tech-bounces at databaseadvisors.com > > [mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of > Drew Wutka > > Sent: 06 September 2004 20:14 > > To: Discussion of Hardware and Software issues > > Subject: RE: [dba-Tech] WXP Connecting Mobiles > > > > > > I'm assuming the laptops are NT based (4.0, 2k, xp), > because you don't > > need to setup profiles for 98. > > > > In that case, there are two approaches we use at work. My > co-worker, > > who is the network Admin, sets up their network account as a power > > user on the laptop. Then he creates a seperate 'Local > Admin' account > > on the laptop, so if the user needs to install something, they log > > off, and log in as the local admin. My approach is just to > setup the > > laptop users with their network account in the local admins group. > > One login, no fuss. It is a little risky doing that, but if they > > have good Anti-virus software, they should be protected. It > > doesn't matter if they are connected to the network or not, > > the laptops will let them log in with cached credentials (NT > > based machines will remember so many cached accounts, I think > > the default is three, so as long as they don't log with three > > different accounts, it will remember their network account > 'forever'). > > > > Drew > > > > -----Original Message----- > > From: dba-tech-bounces at databaseadvisors.com > > [mailto:dba-tech-bounces at databaseadvisors.com]On Behalf Of > Andy Lacey > > Sent: Monday, September 06, 2004 8:40 AM > > To: Dba Tech > > Subject: [dba-Tech] WXP Connecting Mobiles > > > > > > Hope someone can advise. > > > > I seem to be getting involved more and more with > Windows/Network admin > > tasks, in which I have very little experience. But when your client > > asks, you try to do, right? Anyway, don't answer that. The > point is I > > think I'm going to have a few questions which will no doubt > be trivial > > to some of you, so I hope someone can help. > > > > Here's one. We have an NT4 network, and a mix of W98, W2K and WXP > > workstations. We have a single domain. What is standard > practice for > > setting up a laptop (often physically here, often not, connects to > > network if here but not otherwise)? Do I create a local > profile AND a > > domain profile on that machine? Is that normal? I think he > has to have > > a domain profile when connected to the network so we can do normal > > management-type things (update AV defs), but is there another > > way round this that doesn't require two profiles, and doesn't > > require the user to remember which to use when? > > > > > > -- > > Andy Lacey > > http://www.minstersystems.co.uk > > > > > > > > > > ________________________________________________ > > Message sent using UebiMiau 2.7.2 > > > > _______________________________________________ > > dba-Tech mailing list > > dba-Tech at databaseadvisors.com > > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > > > Website: http://www.databaseadvisors.com > > > > > > > > > > _______________________________________________ > > dba-Tech mailing list > > dba-Tech at databaseadvisors.com > > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > > > Website: http://www.databaseadvisors.com > > > > > > _______________________________________________ > dba-Tech mailing list > dba-Tech at databaseadvisors.com > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > Website: http://www.databaseadvisors.com > > > > > _______________________________________________ > dba-Tech mailing list > dba-Tech at databaseadvisors.com > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > Website: http://www.databaseadvisors.com > >