Domain Controller and Workgroup

I have a testbed LAN. The same userids are used on a number of differently configured workstations
with different versions of MS development and office tools. They are therefore part of a workgroup
and not joined to a domain which simplifies things. One of the testbed systems is a Windows Server
2008 system.

I need to install Windows Server 2008 R2 on the server test machine as a domain controller because
some of the software I need to use requires a DC, DNS and Active Directory.

Is it possible to get the Server box and the workstations in the workgroup to talk to each other --
that is to be able to access shares on each other without corrupting the profiles on the
workstations?

Stewart Berman <> wrote:
> I have a testbed LAN. The same userids are used on a number of
> differently configured workstations with different versions of MS
> development and office tools. They are therefore part of a workgroup
> and not joined to a domain which simplifies things. One of the
> testbed systems is a Windows Server 2008 system.
>
> I need to install Windows Server 2008 R2 on the server test machine
> as a domain controller because some of the software I need to use
> requires a DC, DNS and Active Directory.
>
> Is it possible to get the Server box and the workstations in the
> workgroup to talk to each other -- that is to be able to access
> shares on each other without corrupting the profiles on the
> workstations?

Your local users won't be affected by your domain controller. They can still
log in locally if you want them to.
That said, I would switch everyone over to domain accounts. There are
profile migration tools galore (incuding the built in XP FAST, or a registry
hack) but it's often easier just to start fresh.

Hello Stewart,

They can work together, but with opening shares on workstations and having
domain accounts in use, you have very often to provide username/password
for getting access.

I would switch complete to a domain environment where the user accounts are
form AD and the local ones will be removed or at least disabled.

Also do NOT use 2008 R2 for production systems now. And upgrade to RTM will
be not supported, it may work but if you run in problems you are lost.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have a testbed LAN. The same userids are used on a number of
> differently configured workstations with different versions of MS
> development and office tools. They are therefore part of a workgroup
> and not joined to a domain which simplifies things. One of the
> testbed systems is a Windows Server 2008 system.
>
> I need to install Windows Server 2008 R2 on the server test machine as
> a domain controller because some of the software I need to use
> requires a DC, DNS and Active Directory.
>
> Is it possible to get the Server box and the workstations in the
> workgroup to talk to each other -- that is to be able to access shares
> on each other without corrupting the profiles on the workstations?
>

The reason they log in locally is because we don't want to use roaming profiles. The machines are
individual test environments.

The question is can they machines in the workgroup access shares on machines that have joined the
domain and can machines that have joined the domain access shares on machines in the workgroup?

"Lanwench [MVP - Exchange]" < hoo.com> wrote:

>Stewart Berman <> wrote:
>> I have a testbed LAN. The same userids are used on a number of
>> differently configured workstations with different versions of MS
>> development and office tools. They are therefore part of a workgroup
>> and not joined to a domain which simplifies things. One of the
>> testbed systems is a Windows Server 2008 system.
>>
>> I need to install Windows Server 2008 R2 on the server test machine
>> as a domain controller because some of the software I need to use
>> requires a DC, DNS and Active Directory.
>>
>> Is it possible to get the Server box and the workstations in the
>> workgroup to talk to each other -- that is to be able to access
>> shares on each other without corrupting the profiles on the
>> workstations?
>
>Your local users won't be affected by your domain controller. They can still
>log in locally if you want them to.
>That said, I would switch everyone over to domain accounts. There are
>profile migration tools galore (incuding the built in XP FAST, or a registry
>hack) but it's often easier just to start fresh.
>

Using username/password is not a problem. Is there anyway to get browsing to work between the two
sets or will connecting have to be done with a UNC?

Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de> wrote:

>Hello Stewart,
>
>They can work together, but with opening shares on workstations and having
>domain accounts in use, you have very often to provide username/password
>for getting access.
>
>I would switch complete to a domain environment where the user accounts are
>form AD and the local ones will be removed or at least disabled.
>
>Also do NOT use 2008 R2 for production systems now. And upgrade to RTM will
>be not supported, it may work but if you run in problems you are lost.
>
>Best regards
>
>Meinolf Weber
>Disclaimer: This posting is provided "AS IS" with no warranties, and confers
>no rights.
>** Please do NOT email, only reply to Newsgroups
>** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
>> I have a testbed LAN. The same userids are used on a number of
>> differently configured workstations with different versions of MS
>> development and office tools. They are therefore part of a workgroup
>> and not joined to a domain which simplifies things. One of the
>> testbed systems is a Windows Server 2008 system.
>>
>> I need to install Windows Server 2008 R2 on the server test machine as
>> a domain controller because some of the software I need to use
>> requires a DC, DNS and Active Directory.
>>
>> Is it possible to get the Server box and the workstations in the
>> workgroup to talk to each other -- that is to be able to access shares
>> on each other without corrupting the profiles on the workstations?
>>
>

Hello Stewart,

Use UNC path.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Using username/password is not a problem. Is there anyway to get
> browsing to work between the two sets or will connecting have to be
> done with a UNC?
>
> Meinolf Weber [MVP-DS] <meiweb(nospam)@gmx.de> wrote:
>
>> Hello Stewart,
>>
>> They can work together, but with opening shares on workstations and
>> having domain accounts in use, you have very often to provide
>> username/password for getting access.
>>
>> I would switch complete to a domain environment where the user
>> accounts are form AD and the local ones will be removed or at least
>> disabled.
>>
>> Also do NOT use 2008 R2 for production systems now. And upgrade to
>> RTM will be not supported, it may work but if you run in problems you
>> are lost.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I have a testbed LAN. The same userids are used on a number of
>>> differently configured workstations with different versions of MS
>>> development and office tools. They are therefore part of a
>>> workgroup and not joined to a domain which simplifies things. One
>>> of the testbed systems is a Windows Server 2008 system.
>>>
>>> I need to install Windows Server 2008 R2 on the server test machine
>>> as a domain controller because some of the software I need to use
>>> requires a DC, DNS and Active Directory.
>>>
>>> Is it possible to get the Server box and the workstations in the
>>> workgroup to talk to each other -- that is to be able to access
>>> shares on each other without corrupting the profiles on the
>>> workstations?
>>>

Hello Stewart,

You don't have the need for roaming profiles when working in a domain. You
can logon to the workstation and the profile will be stored locally.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> The reason they log in locally is because we don't want to use roaming
> profiles. The machines are individual test environments.
>
> The question is can they machines in the workgroup access shares on
> machines that have joined the domain and can machines that have joined
> the domain access shares on machines in the workgroup?
>
> "Lanwench [MVP - Exchange]"
> < hoo.com> wrote:
>
>> Stewart Berman <> wrote:
>>
>>> I have a testbed LAN. The same userids are used on a number of
>>> differently configured workstations with different versions of MS
>>> development and office tools. They are therefore part of a
>>> workgroup and not joined to a domain which simplifies things. One
>>> of the testbed systems is a Windows Server 2008 system.
>>>
>>> I need to install Windows Server 2008 R2 on the server test machine
>>> as a domain controller because some of the software I need to use
>>> requires a DC, DNS and Active Directory.
>>>
>>> Is it possible to get the Server box and the workstations in the
>>> workgroup to talk to each other -- that is to be able to access
>>> shares on each other without corrupting the profiles on the
>>> workstations?
>>>
>> Your local users won't be affected by your domain controller. They
>> can still
>> log in locally if you want them to.
>> That said, I would switch everyone over to domain accounts. There are
>> profile migration tools galore (incuding the built in XP FAST, or a
>> registry
>> hack) but it's often easier just to start fresh.

Stewart Berman <> wrote:
> The reason they log in locally is because we don't want to use
> roaming profiles. The machines are individual test environments.
>
> The question is can they machines in the workgroup access shares on
> machines that have joined the domain and can machines that have
> joined the domain access shares on machines in the workgroup?

As Meinolf wrote, there is no roaming profile enabled by default. You'd
have to set those up manually if you did want them.

Do not continue to use local accounts - it's impossible to manage them.
Domain accounts are centrally controllable - much much much better.

I wouldn't leave any shares on workgroup PCs/servers - I'd join everything
to the domain and centrally control the security.


>
> "Lanwench [MVP - Exchange]"
> < hoo.com> wrote:
>
>> Stewart Berman <> wrote:
>>> I have a testbed LAN. The same userids are used on a number of
>>> differently configured workstations with different versions of MS
>>> development and office tools. They are therefore part of a
>>> workgroup and not joined to a domain which simplifies things. One
>>> of the testbed systems is a Windows Server 2008 system.
>>>
>>> I need to install Windows Server 2008 R2 on the server test machine
>>> as a domain controller because some of the software I need to use
>>> requires a DC, DNS and Active Directory.
>>>
>>> Is it possible to get the Server box and the workstations in the
>>> workgroup to talk to each other -- that is to be able to access
>>> shares on each other without corrupting the profiles on the
>>> workstations?
>>
>> Your local users won't be affected by your domain controller. They
>> can still log in locally if you want them to.
>> That said, I would switch everyone over to domain accounts. There are
>> profile migration tools galore (incuding the built in XP FAST, or a
>> registry hack) but it's often easier just to start fresh.