Differences between Working Groups and domains in LAN

Why should we build a lan? That is, to share resources, since resources need to be shared, resources will not be too small. How can we manage these resources on different machines? Domain and workgroup are two different network resource management modes in such an environment. So what is a domain and a working group? What are their differences?
"Free" Working Group

Working groups include different computers in different groups based on their functions for convenient management. For example, there may be hundreds of working computers in a network. If these computers are not grouped, they are listed in "Network neighbors, it can be imagined how messy (I'm afraid the network neighbor will also display the "next page ). To solve this problem, Windows 9x/NT/2000 cited the concept of "Working Group". For example, a university can be divided into mathematics departments and Chinese departments, then, all the computers in the Mathematics Department are included in the working group of the mathematics department. All the computers in the Chinese department are included in the working group of the Chinese department ...... If you want to access a department-specific resource, find the Group Name of the Department in "Network Neighbor", and double-click it to view the department-specific computer.

So how can we join the working group? In fact, the method is very simple. You only need to right-click "Network neighbors" on the Windows desktop, select "properties" from the pop-up menu, and click "ID ", add the name you want to join in the "computer name" column, and add the name of the Working group you want to join in the "Working Group" column. If you enter a working group name that does not exist, it is equivalent to creating a new working group. Of course, only your own computer is in it. However, you must note that the length of both the computer name and the Working Group cannot exceed 15 English characters. You can enter Chinese characters, but cannot enter more than 7 Chinese characters. The "computer description" is additional information. You can leave it empty, but it is best to fill in information about the computer's host, such as the "Mathematics host. After clicking the "OK" button, Windows 98 prompts you to restart. After restarting as required, go to "Network neighbors" to view the members of your working group.

Relatively speaking, members in the same working group exchange information frequently. As soon as you enter "Network neighbors", you first see the members in your working group. To access other working groups, double-click "entire network" to view other Working Groups on the network. Double-click the names of other working groups, in this way, you can see the members and exchange resources with them.

In addition, you can leave a Working Group. The method is also very simple. You just need to change the working group name. However, in this way, other people can access your shared resources on the Internet, but only change to a working group. That is to say, you can join any working group on the same network or leave a working group at any time. The "Working Group" is like a club that is free to join and withdraw. It serves only to provide a "room" to facilitate the sharing of resources by computers on the Internet.

Domain Management and settings

For example, if the working group is a "Free hotel", the Domain is a "Star Hotel". The Working Group can go in and out, while the Domain must be strictly controlled. The true meaning of "domain" refers to the combination of computers that the server controls whether computers on the network can join. When it comes to combination, strict control is required. Therefore, strict management is necessary for network security. In peer-to-peer mode, any computer can access shared resources, such as Internet sharing, as long as it is connected to the network. Although shared files on a peer-to-peer network can be used with access passwords, they are easily cracked. In an equivalent network consisting of Windows 9x, data transmission is extremely insecure.

However, in the "Domain" mode, at least one server is responsible for the verification of each computer that is connected to the network and the user, which is equivalent to the guard of an organization, )".

The domain controller contains a database composed of the Account, password, and computer information of the domain. When a computer is connected to the network, the domain controller first needs to identify whether the computer belongs to this domain, whether the user's Logon account exists, and whether the password is correct. If the preceding information is incorrect, the domain controller rejects the user from logging on to the computer. If you cannot log on, you will not be able to access resources that are protected by permissions on the server. You can only access resources shared by Windows in the same way as an Internet user, this protects network resources to a certain extent.

It is not enough to add a computer to the domain so that it and the server can "see" each other in the network neighbors. The network administrator must configure the computer, add this computer to the domain. In this way, files can be shared.

1. Server Side settings

Log on to Windows 2000 Server with Active Directory configured as a system administrator, and select "Administrative Tools" in the "program" option in the "Start" menu ", select "Active Directory users and Computers", right-click "Computers" on the program interface, click "new" in the pop-up menu, and select "computer ", enter the name of the computer you want to add to the domain. The name of the computer to be added to the domain must be in English. Chinese computer names may cause some problems.

2. Client settings

First, check whether the computer name is correct. Then, right-click "Network Neighbor" on the desktop and click "properties". The network attribute settings window appears, confirm that "primary network logon" is "Microsoft network user ". Select "Microsoft network user" at the top of the window (If this option is not available, it indicates that no installation is available. Click "add" to install "Microsoft network user ). Click "properties". The "Microsoft network user properties" dialog box is displayed. Select the "log on to Windows NT domain" check box and enter the domain name you want to log on to in "Windows NT domain. In this case, if it is a Windows 98 operating system, the system will prompt you to restart the computer. After restarting the computer, a Login Dialog Box will appear. After entering the correct domain user account, password, and login domain, you can use resources in the Windows 2000 Server domain. Note that the domain user account and password must be the account and password created by the network administrator for the user, rather than the account and password created by the local user. If the computer is not added to the domain, or the domain name, user name, or password you are logged on to is incorrect, an error message is displayed.
Article entry: csh responsible editor: csh