Workgroup connectivity
1. Ping from client to the server, or visa versa. No authentication.
2. If shares are enabled, SMB - Samba file sharing between client and
server, or visa versa. SMB authentication.
3. If IIS enabled, client browses server. No authentication, or
certificates.
4. If Remote Assistance or Remote Desktop are enabled on client, server
can access client via IP address using local account authentication.
5. WSUS connectivity via IP address.

Active Directory connectivity
1. Manage - Computer Management MMC
2. Group Policy
3...

At this point I need some help. Active Directory supports different
functionalies, but aren't all of the secure channels the same?

What's the baseline connectivity test for a secure channel?

Once I am able to use the management console on a remote machine, then
can I reasonably assume that all Group Policies will succeed?
(Terminal Services is more complex, with licensing requirements etc.;
so disregard for this discussion.)

Tom,

I read the below 4 times and still can't work out what you're asking

What do you mean by secure channel?

In what way does ping failt to auth? ping does not use/need auth.

Can you re-post and re-word at all?


neil




"Tom Penharston" wrote:

> Workgroup connectivity
> 1. Ping from client to the server, or visa versa. No authentication.
> 2. If shares are enabled, SMB - Samba file sharing between client and
> server, or visa versa. SMB authentication.
> 3. If IIS enabled, client browses server. No authentication, or
> certificates.
> 4. If Remote Assistance or Remote Desktop are enabled on client, server
> can access client via IP address using local account authentication.
> 5. WSUS connectivity via IP address.
>
> Active Directory connectivity
> 1. Manage - Computer Management MMC
> 2. Group Policy
> 3...
>
> At this point I need some help. Active Directory supports different
> functionalies, but aren't all of the secure channels the same?
>
> What's the baseline connectivity test for a secure channel?
>
> Once I am able to use the management console on a remote machine, then
> can I reasonably assume that all Group Policies will succeed?
> (Terminal Services is more complex, with licensing requirements etc.;
> so disregard for this discussion.)
>
>

"The logical connection between the Windows XP Professional based
computer and the domain controller is known as a secure channel."
logical connection between the Windows XP Professional based computer

"A secure channel is a connection between a domain member and a domain
controller established to retrieve domain specific information, to
update computer-specific information in the Active Directory, such as
the computer password, and to validate the domain membership."
http://www.microsoft.com/technet/pro.../w2kstart.mspx

Entire article
http://www.windowsitpro.com/Article/...101/20101.html

I never said that ping "fails to authenticate"; that makes no sense.

In a nutshell, there are many communication protocols that make use of
IP connectivity including SMB, http, and other protocols Some of
those IP communications require authentication and some don't.

Now how does that compare to Microsoft domain connectivity? Is there
only ONE communication method used in Active Directory? Or several?

Now how does that relate to my network when my GPs apply to certain
computers and not others. If all of my computers are accessible
through computer management, why wouldn't they also respond to GPs?

> Now how does that compare to Microsoft domain connectivity? Is there only
> ONE communication method used in Active Directory? Or several?

There are many. Start here for a quick overview:
-- http://support.microsoft.com/?id=832017


> Now how does that relate to my network when my GPs apply to certain
> omputers and not others. If all of my computers are accessible through
> computer management, why wouldn't they also respond to GPs?

There are many factors. Check the event logs against www.eventid.net and/
or post back events and additional info on the environment here.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

Thanks, Paul Williams. I simplified the question in a new thread:
http://groups.google.com/group/micro...7f491e735b5f6a