Joining remote computer to a domain

I have a domain hosted by myself running 2k3. I want to join a remote
computer to the domain. I have created a connection which does connect
to the server but cannot locate the domain controller.
Would really appreciate help on this.

Hello John,

Please describe the connection you setup between the remote machine and the
domain controller. How are they connected?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have a domain hosted by myself running 2k3. I want to join a remote
> computer to the domain. I have created a connection which does connect
> to the server but cannot locate the domain controller.
> Would really appreciate help on this.

On Sep 20, 3:59*pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
> Hello John,
>
> Please describe the connection you setup between the remote machine and the
> domain controller. How are they connected?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > I have a domain hosted by myself running 2k3. I want to join a remote
> > computer to the domain. I have created a connection which does connect
> > to the server but cannot locate the domain controller.
> > Would really appreciate help on this.

They are not connected. The remote has its own name and I want to join
it to the domain. The DC has one public IP and I like to know how it
can use the resources on the network. I realize now that it cannot
join the domain since it is not on the same subnet, but I really want
to know how it can use the resources of the network. May be by VPN?

"john" <(E-Mail Removed)> wrote in message
news:49cf3269-94d2-4843-9c94-(E-Mail Removed)...
> On Sep 20, 3:59 pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
>> Hello John,
>>
>> Please describe the connection you setup between the remote machine and
>> the
>> domain controller. How are they connected?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>> > I have a domain hosted by myself running 2k3. I want to join a remote
>> > computer to the domain. I have created a connection which does connect
>> > to the server but cannot locate the domain controller.
>> > Would really appreciate help on this.
>
> They are not connected. The remote has its own name and I want to join
> it to the domain. The DC has one public IP and I like to know how it
> can use the resources on the network. I realize now that it cannot
> join the domain since it is not on the same subnet, but I really want
> to know how it can use the resources of the network. May be by VPN?

Why would you want to join a remote computer to a domain? There is not
much sense in doing that. A remote computer is controlled by remote access
policies, not domain policies. I can see some point in connecting a remote
machine to a domain so that a user can use the domain resources, but cannot
think of any reason to join the machine to the domain. (Being in a different
subnet has nothing to do with this, incidentally. If you make a dialup
connection it will have an IP in the same IP subnet as the server).

It is not a good idea to have a domain controller directly connected to
the Internet or to be multihomed. It is also not a good idea to use a DC as
a remote access server for dialup or VPN.

If you really want a remote user to do a domain login, you need to use
the "login using a dialup connection" option in the client machine's login
dialog box. (A VPN connection is regarded as a dialup connection in this
case).

On Sep 20, 7:48*pm, "Bill Grant" <not.available@online> wrote:
> "john" <johnbah...@hotmail.com> wrote in message
>
> news:49cf3269-94d2-4843-9c94-(E-Mail Removed)...
>
>
>
>
>
> > On Sep 20, 3:59 pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
> >> Hello John,
>
> >> Please describe the connection you setup between the remote machine and
> >> the
> >> domain controller. How are they connected?
>
> >> Best regards
>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> >> > I have a domain hosted by myself running 2k3. I want to join a remote
> >> > computer to the domain. I have created a connection which does connect
> >> > to the server but cannot locate the domain controller.
> >> > Would really appreciate help on this.
>
> > They are not connected. The remote has its own name and I want to join
> > it to the domain. The DC has one public IP and I like to know how it
> > can use the resources on the network. I realize now that it cannot
> > join the domain since it is not on the same subnet, but I really want
> > to know how it can use the resources of the network. May be by VPN?
>
> * *Why would you want to join a remote computer to a domain? There isnot
> much sense in doing that. A remote computer is controlled by remote access
> policies, not domain policies. I can see some point in connecting a remote
> machine to a domain so that a user can use the domain resources, but cannot
> think of any reason to join the machine to the domain. (Being in a different
> subnet has nothing to do with this, incidentally. If you make a dialup
> connection it will have an IP in the same IP subnet as the server).
>
> * * It is not a good idea to have a domain controller directly connected to
> the Internet or to be multihomed. It is also not a good idea to use a DC as
> a remote access server for dialup or VPN.
>
> * *If you really want a remote user to do a domain login, you need touse
> the "login using a dialup connection" option in the client machine's login
> dialog box. (A VPN connection is regarded as a dialup connection in this
> case).- Hide quoted text -
>
> - Show quoted text -

I created a VPN connection and it connects and authenticates. After
connection I don't know how to get into the server or other clients on
the network.

I agree with Bill. If you can establish the VPN, you should be able to
access the domain resources using your domain credentials. Can you ping the
remote computer by IP?

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"john" <(E-Mail Removed)> wrote in message
news:9eb601e9-1872-4750-a38c-(E-Mail Removed)...
On Sep 20, 7:48 pm, "Bill Grant" <not.available@online> wrote:
> "john" <johnbah...@hotmail.com> wrote in message
>
> news:49cf3269-94d2-4843-9c94-(E-Mail Removed)...
>
>
>
>
>
> > On Sep 20, 3:59 pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
> >> Hello John,
>
> >> Please describe the connection you setup between the remote machine and
> >> the
> >> domain controller. How are they connected?
>
> >> Best regards
>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> >> > I have a domain hosted by myself running 2k3. I want to join a remote
> >> > computer to the domain. I have created a connection which does
> >> > connect
> >> > to the server but cannot locate the domain controller.
> >> > Would really appreciate help on this.
>
> > They are not connected. The remote has its own name and I want to join
> > it to the domain. The DC has one public IP and I like to know how it
> > can use the resources on the network. I realize now that it cannot
> > join the domain since it is not on the same subnet, but I really want
> > to know how it can use the resources of the network. May be by VPN?
>
> Why would you want to join a remote computer to a domain? There is not
> much sense in doing that. A remote computer is controlled by remote access
> policies, not domain policies. I can see some point in connecting a remote
> machine to a domain so that a user can use the domain resources, but
> cannot
> think of any reason to join the machine to the domain. (Being in a
> different
> subnet has nothing to do with this, incidentally. If you make a dialup
> connection it will have an IP in the same IP subnet as the server).
>
> It is not a good idea to have a domain controller directly connected to
> the Internet or to be multihomed. It is also not a good idea to use a DC
> as
> a remote access server for dialup or VPN.
>
> If you really want a remote user to do a domain login, you need to use
> the "login using a dialup connection" option in the client machine's login
> dialog box. (A VPN connection is regarded as a dialup connection in this
> case).- Hide quoted text -
>
> - Show quoted text -

I created a VPN connection and it connects and authenticates. After
connection I don't know how to get into the server or other clients on
the network.

Hello John,

If you really need to join the machine to the domain, you have to setup a
VPN connection over RRAS server which should NOT be the DC, just a member
server. Also multihoming DC and connecting it to the internet is not the
best solution. Why do you need the machine to be a domain member, maybe there
is another option?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> On Sep 20, 3:59 pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
>
>> Hello John,
>>
>> Please describe the connection you setup between the remote machine
>> and the domain controller. How are they connected?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I have a domain hosted by myself running 2k3. I want to join a
>>> remote
>>> computer to the domain. I have created a connection which does
>>> connect
>>> to the server but cannot locate the domain controller.
>>> Would really appreciate help on this.
> They are not connected. The remote has its own name and I want to join
> it to the domain. The DC has one public IP and I like to know how it
> can use the resources on the network. I realize now that it cannot
> join the domain since it is not on the same subnet, but I really want
> to know how it can use the resources of the network. May be by VPN?
>

> I created a VPN connection and it connects and authenticates. After
> connection I don't know how to get into the server or other clients on
> the network.

Making a VPN connection just gives you an IP connection. It does not log
you into the domain and it does not give you access to domain resources. It
does not change your login credentials. The username and password you
specify to make the connection are used solely to make the connection.

The simplest way to access files is to use "net" commands. net view
\\servername should show you the shares available on the server. Then use a
"net use" command to map the share. You can put your domain username and
password into the net use command to authenticate.

I can actually see a very good reason for wanting to join a remote computer to a domain.

My scenario would consist of roughly 10,000 plus computers within your organization. Your organization uses SmartCards to authenticate against your domain and requires separate cards for Elevated Privleges and Everyday User. Anyone that knows anything about Windows knows that to join a computer to an AD domain requires a Username and Password combination. The only exception to this being a carefully created SmartCard and only if you are using Vista does this capability even exist.

You have hundreds of systems that come on and off daily and need a way for the user to contact your Help Desk to remotely join the system. Management want to reduce the total number of users with Elevated Privilege and has determined that computer joins is the largest reason for existing Admins still using Usernames and Passwords.

If there was a way for your Help Desk to do the join remotely with a domain service account or something Management would be pleased.