Add computer to multiple domains

hip-e · 29th November 2004, 8:18 PM

I want to make a computer a member of multiple domains. Can I? If so how?

mpot · 30th November 2004, 1:37 AM

Quote:

Originally Posted by hip-e

I want to make a computer a member of multiple domains. Can I? If so how?

A PC can only be a member of a single domain.

Why would you want it to be a member of multiple domains? That's what domain trusts are for...

Cheers,
Martin.

hip-e · 30th November 2004, 12:06 PM

I don't think it will be possible but its something that would be nice to do.

I have a laptop, I work on many networks and it could be quite handy to be a member of all of them. Group policy complications aside.

Domain trusts will not work as the networks are not physically connected. If they were this would be peice of cake

hip-e · 30th November 2004, 12:08 PM

I was imagining the use of something similar to a hardware profile. On boot a domain selection list instead of a hardware profile. Could it work?

Valtagor · 30th November 2004, 1:15 PM

I have this issue, and currently use VM ware to get around som of the problems.

I did try some software last year that allowed a profile to be loaded on bootup, swapping between domains and workgroups. I con't find a reference to it though.

hip-e · 1st December 2004, 11:47 AM

I've googled around for this software you speak of but have been unsuccessful so far. If you could remember what it is would be greatly appreciated

crucial · 1st December 2004, 2:45 PM

I believe with Linux/UNIX you can make each IP address you are assigned a member of a different domain... As for windows I couldn't help with that...

pro2 · 1st December 2004, 6:52 PM

What I done was partition the hard disk into 2 drives using partition magic so I didnt lose any data. Then install windows on the blank partition and joined it to domain2. I then modified (a file, cant remember the name - too long ago) to say <domain1> and <domain2> instead of WinXP and WinXP on bootup. domain1 boots from c: and domain2 boots from d:. Once booted all your data is available.

Sounds dodgey but it worked fine

bsbozzy · 1st December 2004, 7:09 PM

Quote:

Originally Posted by pro2

What I done was partition the hard disk into 2 drives using partition magic so I didnt lose any data. Then install windows on the blank partition and joined it to domain2. I then modified (a file, cant remember the name - too long ago) to say <domain1> and <domain2> instead of WinXP and WinXP on bootup. domain1 boots from c: and domain2 boots from d:. Once booted all your data is available.

Sounds dodgey but it worked fine

Boot.ini

Just do as they said, create another partition

talking goat · 1st December 2004, 8:38 PM

I have a client with a laptop that I had to do some work on, and it had 5 or more domains in the drop down box where you login and choose to logon to computer or domain account.

Woz · 1st December 2004, 8:56 PM

Join each domain individually but try and keep the same username and password on each. You can use joindom program (google it) or My Computer -> Properties -> Computer Name and then either Change or Network Id to join. This will give you the drop down list at the initial logon. If the domains are physically on the same LAN you can link to resources on other domains from the home domain you logged into. I have 6 domains in the drop down but almost always logon locally as depending upon location I generally only want access to the networked printers where they dont have guest access.

mpot · 2nd December 2004, 5:41 PM

Quote:

Originally Posted by talking_goat

I have a client with a laptop that I had to do some work on, and it had 5 or more domains in the drop down box where you login and choose to logon to computer or domain account.

That doesn't mean the computer was in multiple domains....it just means the domain of which the pc is a member has trusts to multiple other domains, so you can use useraccounts in any of those domains to login to the PC.

Cheers,
Martin.

DavidRa · 2nd December 2004, 6:04 PM

Nope, no supported way of being part of two domains (it would require that the computer have two or more domain SIDs - and then which one should it use)

You don't need to be a domain member to use resources in another domain.

Connect to a network drive - 2000 and XP will ask for credentials, you supply a username in the form "FOREIGNDOMAIN\Username" and the foreign domain password.

If you're using something like an SQL Server [Edit: or print servers], use the command prompt to establish credentials:

NET USE \\Server\IPC$ /U:FOREIGNDOMAIN\Username *

Then start the SQL tools that use NTLM authentication.

Web based apps will usually allow Basic auth as well as NTLM (so that non-IE browsers work) - use the FOREIGNDOMAIN\Username form for these too.

I think that covers all the ways to connect to foreign secure resources

Of course - with some things like network printers, you don't want to join the domain, just create a new local printer using the printer's IP address and bypass the network completely

hip-e · 2nd December 2004, 10:19 PM

Valtagor and Woz have the best answers for me so far, David that will help if I can't do what I want to

For interest theres a peice of software called NetSwitcher . It seems to have the functionality but still limited to the one domain member at a time thing, but it could be the bizness.....

All good information though, cheers.

29th November 2004, 8:18 PM	#1
hip-e Member Join Date: Sep 2001 Posts: 465	Add computer to multiple domains I want to make a computer a member of multiple domains. Can I? If so how?

1st December 2004, 2:45 PM	#7
crucial Member Join Date: Mar 2004 Location: Sydney Posts: 208	I believe with Linux/UNIX you can make each IP address you are assigned a member of a different domain... As for windows I couldn't help with that... __________________ Crucial Paradigm - *Sydney Based Hosting Solutions, Enterprise VPS Plans from $15/m*

1st December 2004, 6:52 PM	#8
pro2 Member Join Date: Mar 2004 Location: WA Posts: 110	What I done was partition the hard disk into 2 drives using partition magic so I didnt lose any data. Then install windows on the blank partition and joined it to domain2. I then modified (a file, cant remember the name - too long ago) to say <domain1> and <domain2> instead of WinXP and WinXP on bootup. domain1 boots from c: and domain2 boots from d:. Once booted all your data is available. Sounds dodgey but it worked fine __________________ i7 2600, MSI Z68A, 8GB Corsair, HD6950, Corsair TX850, Corsair Force 3 SSD, Win7 64bit.

1st December 2004, 8:56 PM	#11
Woz Member Join Date: Jun 2001 Location: Melbourne Posts: 182	Join each domain individually but try and keep the same username and password on each. You can use joindom program (google it) or My Computer -> Properties -> Computer Name and then either Change or Network Id to join. This will give you the drop down list at the initial logon. If the domains are physically on the same LAN you can link to resources on other domains from the home domain you logged into. I have 6 domains in the drop down but almost always logon locally as depending upon location I generally only want access to the networked printers where they dont have guest access. __________________ Usually there is a tagline placed here in the mistaken belief that it will inspire others. Lian Li Owners Club Member #19 SFF owner/modder club member 4

2nd December 2004, 6:04 PM	#13
DavidRa Member Join Date: Jun 2002 Location: Sydney Posts: 2,377	Nope, no supported way of being part of two domains (it would require that the computer have two or more domain SIDs - and then which one should it use) You don't need to be a domain member to use resources in another domain. Connect to a network drive - 2000 and XP will ask for credentials, you supply a username in the form "FOREIGNDOMAIN\Username" and the foreign domain password. If you're using something like an SQL Server [Edit: or print servers], use the command prompt to establish credentials: NET USE \\Server\IPC$ /U:FOREIGNDOMAIN\Username * Then start the SQL tools that use NTLM authentication. Web based apps will usually allow Basic auth as well as NTLM (so that non-IE browsers work) - use the FOREIGNDOMAIN\Username form for these too. I think that covers all the ways to connect to foreign secure resources Of course - with some things like network printers, you don't want to join the domain, just create a new local printer using the printer's IP address and bypass the network completely __________________ Folding as djr 45,000 Club @ 4,000,000 Points Milestone Earlier: Folding as djr(at)wamoz(dot)com 20,000 Club @ 250,000 Points Milestone Blogging at http://www.pdconsec.net/blogs/davidr/ Last edited by DavidRa; 2nd December 2004 at 6:06 PM. Reason: Forgot about remote network printing

30th November 2004, 12:06 PM	#3
hip-e Member Join Date: Sep 2001 Posts: 465	I don't think it will be possible but its something that would be nice to do. I have a laptop, I work on many networks and it could be quite handy to be a member of all of them. Group policy complications aside. Domain trusts will not work as the networks are not physically connected. If they were this would be peice of cake

30th November 2004, 12:08 PM	#4
hip-e Member Join Date: Sep 2001 Posts: 465	I was imagining the use of something similar to a hardware profile. On boot a domain selection list instead of a hardware profile. Could it work?

30th November 2004, 1:15 PM	#5
Valtagor Member Join Date: Nov 2004 Location: Bne Posts: 130	I have this issue, and currently use VM ware to get around som of the problems. I did try some software last year that allowed a profile to be loaded on bootup, swapping between domains and workgroups. I con't find a reference to it though.

1st December 2004, 11:47 AM	#6
hip-e Member Join Date: Sep 2001 Posts: 465	I've googled around for this software you speak of but have been unsuccessful so far. If you could remember what it is would be greatly appreciated

1st December 2004, 8:38 PM	#10
talking goat Member Join Date: Jul 2001 Location: Brisbane Posts: 1,331	I have a client with a laptop that I had to do some work on, and it had 5 or more domains in the drop down box where you login and choose to logon to computer or domain account.

2nd December 2004, 10:19 PM	#14
hip-e Member Join Date: Sep 2001 Posts: 465	Valtagor and Woz have the best answers for me so far, David that will help if I can't do what I want to For interest theres a peice of software called NetSwitcher . It seems to have the functionality but still limited to the one domain member at a time thing, but it could be the bizness..... All good information though, cheers. Last edited by hip-e; 2nd December 2004 at 10:23 PM.