Domain x Workspace

[Luiz Horacio]

Hi,

I have a Windows XP Pro machine running inside a hospital. It has 2 users:
one with administrative rights and another as a guest account.

This week the IT people came and installed an application that will work
with some kind of DB. And then the problem started. They said they needed to
include my machine in a specific 'domain', but as it was installed my XP
would only work in a 'workspace'.

Now the weird part: they said I would need to reformat since the only way to
do this 'domain' thing would be in the instalation process...

Is this correct? I guess not, but would like to hear from you.

What would they have to do to include my machine in this domain, and what
needs to be done in the server side?


Thanks,


Luiz Horacio

 

[Chuck]

Hi,

I have a Windows XP Pro machine running inside a hospital. It has 2 users:
one with administrative rights and another as a guest account.

This week the IT people came and installed an application that will work
with some kind of DB. And then the problem started. They said they needed to
include my machine in a specific 'domain', but as it was installed my XP
would only work in a 'workspace'.

Now the weird part: they said I would need to reformat since the only way to
do this 'domain' thing would be in the instalation process...

Is this correct? I guess not, but would like to hear from you.

What would they have to do to include my machine in this domain, and what
needs to be done in the server side?


Thanks,


Luiz Horacio

Luiz,

In most cases, moving a computer from a workgroup environment to a domain
environment is a simple matter of joining the computer to the domain. This is
generally done by logging into the computer as an administrator, then joining
the domain as a domain administrator, from System Properties - Computer Name.

I, personally, know of no cases where reformatting (reinstalling the OS) is a
requirement to joining a computer to a domain.

I hate to second guess fellow techies, but, I'd bet your domain admins are
having you reformat, and reinstall the OS, as a security measure. They don't
have to worry about any hostile code (adware, spyware, viruses) that might have
been installed on your computer in the past.

This technique makes sense, at first glance. However:
1) If your computer was ever attached to their network, when a member of a
workgroup, it is still a threat WRT adware, spyware, and viruses. Not all
hostile code requires domain identity to spread thru a network.
2) Telling the user community (ie you) to reformat, and justifying that as a
prerequisite to joining the domain, is a bad relationship policy. IMHO.
3) Needless reformatting risks loss of data, and waste of time. Bad policy
from a management perspective.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Doug Sherman [MVP]]

Most likely these guys have an standard image which they pump out to join
computers to the domain using RIS, Ghost or some other technology which
necessary reformats the drive. As Chuck said, this is not necessary. All
you need is a domain user account and credentials to join the domain. Takes
about 2 minutes; you will get a new user profile, but your applications will
still be installed. The standard image undoubtedly has benefits for domain
administration, but there ought to be a more convincing reason to destroy an
existing XP istallation. Perhaps there is one, but they ought to share it
with you rather than misleading you.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

 

[Chuck]

Hi Chuck,


Thanks for your explanation.

I really believe they are making a mistake of some kind... But your answer
gives me background to avoid their solution.


Thanks,

Luiz Horacio

Luiz,

Well, I've worked with IT guys who are so punch drunk from all the computer
problems caused by spyware, that their normal response to any unknown problem is
"re image the computer". Of course, without any preventative measures, like
user education or system hardening, they'll be back re imaging that same
computer in 6 months.

For your sake, I hope your IT staff know how to join a computer to a domain,
without re installing the OS.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Luiz Horacio]

Hi Chuck,


Thanks for your explanation.

I really believe they are making a mistake of some kind... But your answer
gives me background to avoid their solution.


Thanks,

Luiz Horacio

 

[Luiz Horacio]

Hi Doug,

No, no image... They wanted me to reinstall everything with someone from TI
by my side (probably to fill 'domain' and accounts information.

They are simply wrong, and you helped me to point this out.


Thanks,

Luiz Horacio

 

[Luiz Horacio]

Hi Chuck,

For your sake, I hope your IT staff know how to join a computer to a domain,
without re installing the OS.

I hope this too.

Thanks again,


Luiz Horacio