Haslett, Andrew
andrew.haslett at ilc.gov.au
Tue Sep 7 03:00:17 CDT 2004
>From memory, this can be disabled via policy (GPO) though... -----Original Message----- From: Andy Lacey [mailto:andy at minstersystems.co.uk] Sent: Tuesday, 7 September 2004 4:16 PM To: 'Discussion of Hardware and Software issues' Subject: RE: [dba-Tech] WXP Connecting Mobiles Interesting. I'll try that. Andy > -----Original Message----- > From: dba-tech-bounces at databaseadvisors.com > [mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of Drew Wutka > Sent: 06 September 2004 22:43 > To: Discussion of Hardware and Software issues > Subject: RE: [dba-Tech] WXP Connecting Mobiles > > > NT based clients (NT 4.0, W2k pro, XP Pro) all cache a users > credentials, so if a user logs on, with their domain account, and the > domain is not available, they will be 'logged' in with their cached > credentials. You do not have to be on the domain to log in with your > domain account, except, obviously, for their first login for that > account (after that, the credentials are cached....) > > Drew > > -----Original Message----- > From: dba-tech-bounces at databaseadvisors.com > [mailto:dba-tech-bounces at databaseadvisors.com]On Behalf Of Andy Lacey > Sent: Monday, September 06, 2004 3:54 PM > To: 'Discussion of Hardware and Software issues' > Subject: RE: [dba-Tech] WXP Connecting Mobiles > > > I'm probably wrong here Drew, but if the only profile on the laptop is > their network one then how do they logon when they're away from the > network? As I understood it, to connect to the network and have > everything operate well, and attract domain security, etc, etc he must > logon as a domain user, but logging-on as a domain user will fail when > not connected won't it? That's why I thought he'd need a local and a > domain profile. From what you're saying you do I suspect I'm wrong > (usually am) but I don't see how. > > -- Andy Lacey > http://www.minstersystems.co.uk > > > -----Original Message----- > > From: dba-tech-bounces at databaseadvisors.com > > [mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of > Drew Wutka > > Sent: 06 September 2004 20:14 > > To: Discussion of Hardware and Software issues > > Subject: RE: [dba-Tech] WXP Connecting Mobiles > > > > > > I'm assuming the laptops are NT based (4.0, 2k, xp), > because you don't > > need to setup profiles for 98. > > > > In that case, there are two approaches we use at work. My > co-worker, > > who is the network Admin, sets up their network account as a power > > user on the laptop. Then he creates a seperate 'Local > Admin' account > > on the laptop, so if the user needs to install something, they log > > off, and log in as the local admin. My approach is just to > setup the > > laptop users with their network account in the local admins group. > > One login, no fuss. It is a little risky doing that, but if they > > have good Anti-virus software, they should be protected. It doesn't > > matter if they are connected to the network or not, the laptops will > > let them log in with cached credentials (NT based machines will > > remember so many cached accounts, I think the default is three, so > > as long as they don't log with three different accounts, it will > > remember their network account > 'forever'). > > > > Drew > > > > -----Original Message----- > > From: dba-tech-bounces at databaseadvisors.com > > [mailto:dba-tech-bounces at databaseadvisors.com]On Behalf Of > Andy Lacey > > Sent: Monday, September 06, 2004 8:40 AM > > To: Dba Tech > > Subject: [dba-Tech] WXP Connecting Mobiles > > > > > > Hope someone can advise. > > > > I seem to be getting involved more and more with > Windows/Network admin > > tasks, in which I have very little experience. But when your client > > asks, you try to do, right? Anyway, don't answer that. The > point is I > > think I'm going to have a few questions which will no doubt > be trivial > > to some of you, so I hope someone can help. > > > > Here's one. We have an NT4 network, and a mix of W98, W2K and WXP > > workstations. We have a single domain. What is standard > practice for > > setting up a laptop (often physically here, often not, connects to > > network if here but not otherwise)? Do I create a local > profile AND a > > domain profile on that machine? Is that normal? I think he > has to have > > a domain profile when connected to the network so we can do normal > > management-type things (update AV defs), but is there another way > > round this that doesn't require two profiles, and doesn't require > > the user to remember which to use when? > > > > > > -- > > Andy Lacey > > http://www.minstersystems.co.uk > > > > > > > > > > ________________________________________________ > > Message sent using UebiMiau 2.7.2 > > > > _______________________________________________ > > dba-Tech mailing list > > dba-Tech at databaseadvisors.com > > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > > > Website: http://www.databaseadvisors.com > > > > > > > > > > _______________________________________________ > > dba-Tech mailing list > > dba-Tech at databaseadvisors.com > > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > > > Website: http://www.databaseadvisors.com > > > > > > _______________________________________________ > dba-Tech mailing list > dba-Tech at databaseadvisors.com > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > Website: http://www.databaseadvisors.com > > > > > _______________________________________________ > dba-Tech mailing list > dba-Tech at databaseadvisors.com > http://databaseadvisors.com/mailman/listinfo/d> ba-tech > > Website: http://www.databaseadvisors.com > > _______________________________________________ dba-Tech mailing list dba-Tech at databaseadvisors.com http://databaseadvisors.com/mailman/listinfo/dba-tech Website: http://www.databaseadvisors.com IMPORTANT - PLEASE READ ******************** This email and any files transmitted with it are confidential and may contain information protected by law from disclosure. If you have received this message in error, please notify the sender immediately and delete this email from your system. No warranty is given that this email or files, if attached to this email, are free from computer viruses or other defects. They are provided on the basis the user assumes all responsibility for loss, damage or consequence resulting directly or indirectly from their use, whether caused by the negligence of the sender or not.