Difference between domain and workstation logon?

[dan]

What is the practical difference between loging on to a
win2000 workstation using the "workstation" or
the "domain" Logon? I just replaced an existing win2000
where the user was loging on using the domain and
everything was working well. However, when I setup the
new workstation with win2000 and configure the user
longon, I'm able to logon both as a "workstation" and
a "domain". I also have internet access and access to the
server files, regardless of which logon I use. Problem
is - when I install some programs under the domain logon
and then try and run them - they won't run. They will
install and run when I logon as "workstation". Question,
if I have the same access to the server under both logons,
what is the difference between the two? What will one
logon give that the other won't and why won't programs run
when installed under the domain logon? Thanks...

 

[Chris Knapp]

You really need to pick up a book on Windows 2000 administration. . .

Logging into a Domain will give your user access to resources in the domain
(including the AD server(s) and any other members servers) you give them
permission to access. It will also allow you to centrally manage all
accounts. Logging into just the workstation will only give them access to
resources on that workstation. this happens to include Internet access
(assuming no proxy server is used) and any applications installed (that
their account has local permission to use.) This requires you to create an
account on each workstation for each user that you intend to allow to use
that PC.

Windows is all about resources and associated permissions. Diagnosing your
permission issues is beyond this post. (see my first sentence)

However, if the user name they log into on the workstation exactly matches a
domain account (in both login name and password) then they will also get
access to domain resources if they go looking for them or you map a drive to
them.

For security reasons (and your sanity) do not create accounts on your
workstations. The only accounts that should be there are administrator and
guest. Guest should be disabled and administrator should definitely NOT have
the same password as your domain servers! Do not allow users to know the
administrator account on their workstations either.