Drew Wutka
dbatech at wolfwares.com
Mon Sep 6 16:42:58 CDT 2004
NT based clients (NT 4.0, W2k pro, XP Pro) all cache a users credentials, so if a user logs on, with their domain account, and the domain is not available, they will be 'logged' in with their cached credentials. You do not have to be on the domain to log in with your domain account, except, obviously, for their first login for that account (after that, the credentials are cached....) Drew -----Original Message----- From: dba-tech-bounces at databaseadvisors.com [mailto:dba-tech-bounces at databaseadvisors.com]On Behalf Of Andy Lacey Sent: Monday, September 06, 2004 3:54 PM To: 'Discussion of Hardware and Software issues' Subject: RE: [dba-Tech] WXP Connecting Mobiles I'm probably wrong here Drew, but if the only profile on the laptop is their network one then how do they logon when they're away from the network? As I understood it, to connect to the network and have everything operate well, and attract domain security, etc, etc he must logon as a domain user, but logging-on as a domain user will fail when not connected won't it? That's why I thought he'd need a local and a domain profile. From what you're saying you do I suspect I'm wrong (usually am) but I don't see how. -- Andy Lacey http://www.minstersystems.co.uk > -----Original Message----- > From: dba-tech-bounces at databaseadvisors.com > [mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of Drew Wutka > Sent: 06 September 2004 20:14 > To: Discussion of Hardware and Software issues > Subject: RE: [dba-Tech] WXP Connecting Mobiles > > > I'm assuming the laptops are NT based (4.0, 2k, xp), because > you don't need to setup profiles for 98. > > In that case, there are two approaches we use at work. My > co-worker, who is the network Admin, sets up their network > account as a power user on the laptop. Then he creates a > seperate 'Local Admin' account on the laptop, so if the user > needs to install something, they log off, and log in as the > local admin. My approach is just to setup the laptop users > with their network account in the local admins group. One > login, no fuss. It is a little risky doing that, but if they > have good Anti-virus software, they should be protected. It > doesn't matter if they are connected to the network or not, > the laptops will let them log in with cached credentials (NT > based machines will remember so many cached accounts, I think > the default is three, so as long as they don't log with three > different accounts, it will remember their network account 'forever'). > > Drew > > -----Original Message----- > From: dba-tech-bounces at databaseadvisors.com > [mailto:dba-tech-bounces at databaseadvisors.com]On Behalf Of Andy Lacey > Sent: Monday, September 06, 2004 8:40 AM > To: Dba Tech > Subject: [dba-Tech] WXP Connecting Mobiles > > > Hope someone can advise. > > I seem to be getting involved more and more with > Windows/Network admin tasks, in which I have very little > experience. But when your client asks, you try to do, right? > Anyway, don't answer that. The point is I think I'm going to > have a few questions which will no doubt be trivial to some > of you, so I hope someone can help. > > Here's one. We have an NT4 network, and a mix of W98, W2K and > WXP workstations. We have a single domain. What is standard > practice for setting up a laptop (often physically here, > often not, connects to network if here but not otherwise)? Do > I create a local profile AND a domain profile on that > machine? Is that normal? I think he has to have a domain > profile when connected to the network so we can do normal > management-type things (update AV defs), but is there another > way round this that doesn't require two profiles, and doesn't > require the user to remember which to use when? > > > -- > Andy Lacey > http://www.minstersystems.co.uk > > > > > ________________________________________________ > Message sent using UebiMiau 2.7.2 > > _______________________________________________ > dba-Tech mailing list > dba-Tech at databaseadvisors.com > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > Website: http://www.databaseadvisors.com > > > > > _______________________________________________ > dba-Tech mailing list > dba-Tech at databaseadvisors.com > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > Website: http://www.databaseadvisors.com > > _______________________________________________ dba-Tech mailing list dba-Tech at databaseadvisors.com http://databaseadvisors.com/mailman/listinfo/dba-tech Website: http://www.databaseadvisors.com