deepak.k.jena Posted March 25, 2012 Share Posted March 25, 2012 Hello, Recently, i have installed server 2003 and created a domain named Testlab.com. I have another machine which is running xp , i want to connect the xp machine to the domain Testlab.com. When i ping the server and domain i am getting the response, but when i try to connect to domain it gives me error. Please anybody help me to fix the issue. Link to comment Share on other sites More sharing options...
sc302 Veteran Posted March 25, 2012 Veteran Share Posted March 25, 2012 A couple of things. First it isn't best practice or recommended to use a .com, .net, or any other addressable Internet domain extension. .lan, .local, or even .mylocalnetwork would be just fine. Second, your dns needs to be the windows domain controller. Ip properties for all network devices should have the dc as the only DNS server, no secondary dns servers. If it is easier disable dhcp in the router and have the windows server do dhcp. Even on the server the DNS should be itself, no other DNA should be in tcpip properties. Link to comment Share on other sites More sharing options...
deepak.k.jena Posted March 26, 2012 Author Share Posted March 26, 2012 Thanks for you response, let me try this and will update. Link to comment Share on other sites More sharing options...
.bin Posted March 26, 2012 Share Posted March 26, 2012 Please don't forget to introduce yourself here! Best Regards, .bin :) Link to comment Share on other sites More sharing options...
Grogi Posted March 28, 2012 Share Posted March 28, 2012 Also, if the network config is like sc302 told, you will have to make some user in AD Users and computers on DC. In the process of joining client to domain you will have to provide login details of domain user you created on DC. Remember, when you join domain, and login on client as domain user, your rights on local computer will be changed unless you define domain user as admin on local machine. Link to comment Share on other sites More sharing options...
sc302 Veteran Posted March 30, 2012 Veteran Share Posted March 30, 2012 Also, if the network config is like sc302 told, you will have to make some user in AD Users and computers on DC. In the process of joining client to domain you will have to provide login details of domain user you created on DC. Remember, when you join domain, and login on client as domain user, your rights on local computer will be changed unless you define domain user as admin on local machine. this makes as much sense as the ramblings of a drunk person high on coke...you ok there? You can join a pc using the domain admin account or any account that has domain admin rights, you do not need to be a user. After the computer has been joined to the domain followed by a reboot, any Active Directory user can logon to that pc. By default Domain Users have the ablitly to logon only and run programs, they are not Administrators or Power Users so they cannot add software or hardware or really make many system changes to the pc. I would suggest making a AD group for local Admins and Power users and adding them in the respective local groups on the PC's so that you can easily elevate their rights through AD vs being on their PC. Or you can just Add them as needed to the PC. It all depends on you really. You can add a computer as a end user, but you surely do not have to. You can only do this 10 times as an any one particular AD user without any other configuration, unless you are a domain admin then you can add as many computers you want to the domain. Link to comment Share on other sites More sharing options...
+BudMan MVC Posted March 30, 2012 MVC Share Posted March 30, 2012 sc302, keep in mind that it is quite possible that Grogi's native language is not english. Notice his location. What he stated is correct, even though you might need to read it a few times ;) Once the machine has joined the domain, you will want to create user accounts in the domain to login with. Its unlikely you would want to login in with domain administrator account on the member machines all the time, etc. And he is also correct in saying, which you said the exact same thing - normal domain users will not be admin or power users on the member box if they login with normal domain user credentials. Link to comment Share on other sites More sharing options...
Recommended Posts