Domain and Workgroup confussion in Server 2003

Hi everyone.
I installed Windows Server 2003 Standard Edition, and I configured that
computer
to be a domain controller (Active Directory).
In another computer I have Windows XP and it is not configured to join a
domain. It
is now configured to be in a Workgrup. However, if I search the 2003 server
in the
Network icon I can log in it (after typing the username and password) and
use the
shared folders. So, this means that I don't need to right-click My PC icon
and go to
"Computer Name" tab and click the "Change" Button to join the domain.

Now, this is my question:
What's the difference between:
1.telling the computer to join a domain, and
2.finding the server and logging in it directly (even though the computer is
still
in a Workgroup)?
Is there any advantages using one option or another?

Also I have another question.
I created an User called roland (it belongs to Domain Users group).
As a test, I told the computer to join the domain. Now, roland can't install
any
application software. The computer forces me to run any setup as the
Administrator.

After installation of software, roland can't use the application software
because
he's got no permissions to write in Program Files folder, and it's necessary
for the
application software to write in Program Files folder.
Also, if he right-click My PC icon and go to "Computer Name" tab, he can't
take the
computer out of the domain;that option is for administrators only.
So, after all that, I configured roland to be a member of Administrators
group.
Then, I restarted the XP computer, log in using roland's account, and he's
still not
able to install the application software, also he can't take the computer
out of the
domain.
What do I need to do with roland to be able to do that?
Which groups he must be member of?

Thanks for all your help, this is very important for me, I've read a lot of
documentation but with unsuccesful results.

Roland

Yes, if you have username with the same password, you can logon local computer and access the domain resources. For example, I always use my laptop to access my clients’ domain by creating the same username of the local logon in the DC and I don’t need to join the domain.



Creating domain gives you a central administration. For example, you can create all users in the DC instead of creating them one by one on each workstation. Another example is you can create group policy to manage group users while workstation manages only local policy.


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Seicom" <(E-Mail Removed)> wrote in message news:FC6BFB4E-B3E8-48FA-90DC-(E-Mail Removed)...
Hi everyone.
I installed Windows Server 2003 Standard Edition, and I configured that
computer
to be a domain controller (Active Directory).
In another computer I have Windows XP and it is not configured to join a
domain. It
is now configured to be in a Workgrup. However, if I search the 2003 server
in the
Network icon I can log in it (after typing the username and password) and
use the
shared folders. So, this means that I don't need to right-click My PC icon
and go to
"Computer Name" tab and click the "Change" Button to join the domain.

Now, this is my question:
What's the difference between:
1.telling the computer to join a domain, and
2.finding the server and logging in it directly (even though the computer is
still
in a Workgroup)?
Is there any advantages using one option or another?

Also I have another question.
I created an User called roland (it belongs to Domain Users group).
As a test, I told the computer to join the domain. Now, roland can't install
any
application software. The computer forces me to run any setup as the
Administrator.

After installation of software, roland can't use the application software
because
he's got no permissions to write in Program Files folder, and it's necessary
for the
application software to write in Program Files folder.
Also, if he right-click My PC icon and go to "Computer Name" tab, he can't
take the
computer out of the domain;that option is for administrators only.
So, after all that, I configured roland to be a member of Administrators
group.
Then, I restarted the XP computer, log in using roland's account, and he's
still not
able to install the application software, also he can't take the computer
out of the
domain.
What do I need to do with roland to be able to do that?
Which groups he must be member of?

Thanks for all your help, this is very important for me, I've read a lot of
documentation but with unsuccesful results.

Roland

Ok, perfect. I have understood the domain and workgroup issue. Thanks!
About the other question, how can I make user roland able to install
application
software and take his computer out of the domain?

Thanks a lot for your time!

Roland

"Robert L [MS-MVP]" wrote:

> Yes, if you have username with the same password, you can logon local computer and access the domain resources. For example, I always use my laptop to access my clients’ domain by creating the same username of the local logon in the DC and I don’t need to join the domain.
>
>
>
> Creating domain gives you a central administration. For example, you can create all users in the DC instead of creating them one by one on each workstation. Another example is you can create group policy to manage group users while workstation manages only local policy.
>
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Seicom" <(E-Mail Removed)> wrote in message news:FC6BFB4E-B3E8-48FA-90DC-(E-Mail Removed)...
> Hi everyone.
> I installed Windows Server 2003 Standard Edition, and I configured that
> computer
> to be a domain controller (Active Directory).
> In another computer I have Windows XP and it is not configured to join a
> domain. It
> is now configured to be in a Workgrup. However, if I search the 2003 server
> in the
> Network icon I can log in it (after typing the username and password) and
> use the
> shared folders. So, this means that I don't need to right-click My PC icon
> and go to
> "Computer Name" tab and click the "Change" Button to join the domain.
>
> Now, this is my question:
> What's the difference between:
> 1.telling the computer to join a domain, and
> 2.finding the server and logging in it directly (even though the computer is
> still
> in a Workgroup)?
> Is there any advantages using one option or another?
>
> Also I have another question.
> I created an User called roland (it belongs to Domain Users group).
> As a test, I told the computer to join the domain. Now, roland can't install
> any
> application software. The computer forces me to run any setup as the
> Administrator.
>
> After installation of software, roland can't use the application software
> because
> he's got no permissions to write in Program Files folder, and it's necessary
> for the
> application software to write in Program Files folder.
> Also, if he right-click My PC icon and go to "Computer Name" tab, he can't
> take the
> computer out of the domain;that option is for administrators only.
> So, after all that, I configured roland to be a member of Administrators
> group.
> Then, I restarted the XP computer, log in using roland's account, and he's
> still not
> able to install the application software, also he can't take the computer
> out of the
> domain.
> What do I need to do with roland to be able to do that?
> Which groups he must be member of?
>
> Thanks for all your help, this is very important for me, I've read a lot of
> documentation but with unsuccesful results.
>
> Roland
>