The question is kind of vague in where each of us will wonder what safe
means. To answer the question, sure, you can have a device not joined to
the Active Directory environment but it raises questions on how does it fit
into the corporations overall strategy of managing that device from a
central standpoint.
This could range anywhere from the basics of overall patch/hotfix
management, antivirus updates, asset management (software/hardware
inventory), .etc.
Other things that come to mind are non-joined workstation won't be able to
use DFS paths. Extra work in regards to user account management on
standalone devices.
"khers" <> wrote in message
news:7d2fbfeb-bff2-4165-b2ec-...
> Hi all
> We have some machines in our network, and the questions has raised
> about wether we could have these machines outside our domain policy.
> My question is:
> Is it safe to have computers (Mac and PC) within the organization (on
> their own sub-vlan) which are not members of our windows 2008R2
> domain? What are the risks?
>
> cheers
> Khers
|