Thanks! You're right. However, there must be some advantages to be in the
same workgroup or the same domain if the system allows us to pre-set it.
Long time ago, I thought file and printer sharing only works in the same
workgroup or the same domain. And that doesn't seem to be the case. Would
you mind tell me the pros and cons to be in the same workgroup or the same
domain? In the circumstances, how do we decide which domain or workgroup we
should choose to attach? I suppose the one we access most should be the best
choice. Is there any other factor?
Network Neighborhood / My Network Places lets us see all computers near us. The
workgroup that we are in is the part of Network Neighborhood that is nearest to
us - those are the computers that we need access to the most. A workgroup
provides a way of identifying the computers that relate closely to our computer.
A domain, on the other hand, is a collection of computers that trust each other.
If / when your computer is joined to a domain, it sets up a two way trust.
Your computer learns to trust the domain. You authenticate (login as a local
admin) to your computer, allow a domain admin to authenticate to the domain
from your computer, and a "certificate" from the domain is added to your
computer.
Simultaneously, the domain learns to trust your computer. You authenticate
(login as a local admin) to your computer, allow a domain admin to authenticate
to the domain from your computer, and a "certificate" from your computer is
added to the domain.
The domain membership also gives workgroup visibility. You see the other
members of "your" domain. as you would see the other members of "your"
workgroup. But the two way trust in the domain is special.
You gain access to your computer thru domain authentication - you trust the
domain, based upon the certificate from the domain that's now on your computer,
and upon the credentials (domain account / password) that you supply. You gain
access to domain resources in a similar way, from the certificate from your
computer that's now in the domain, and from the credentials that you supply.