Windows domain and workgroup concepts

Resources on LAN need to be managed. "Domain" and "Working Group" are two different network resource management modes. What is the difference between the two?

Work Group

There may be hundreds of thousands of computers in a network. If these computers are not grouped, they will all be listed in "Network neighbors". What a mess can be imagined. To solve this problem
Windows
9x/NT/2000 references the concept of "Working Group", which includes different computers in different groups according to their functions. For example, the computers of the finance department are included in the "Finance Department" Working Group, all computers in the personnel department
Included in the "Personnel Department" Working Group. To access resources of a department, find the Working Group Name of the Department in "Network Neighbor" and double-click the team to view the computer of the Department.

How can I join a working group? In fact, it is very simple. You only need to right-click "Network neighbors" on your Windows desktop, select "properties" from the pop-up menu, and click "ID ", add the name you want to join in the "computer name" column, and add the name of the Working group you want to join in the "Working Group" column.

If you do not enter a working group name before, it is equivalent to creating a new working group. Of course, only your computer is in it. The length of the computer name and workgroup cannot exceed 15 English characters.
Enter up to seven Chinese characters. The "computer description" is additional information. You can leave it blank, but it is best to fill in the information of the computer owner, such as the "Technical Director. Click [OK ].
Windows 98 prompts you to restart. After restarting as required, go to "Network neighbors" and you will be able to see the members of your working group.

Generally, members in the same working group exchange information frequently. As soon as you enter "Network neighbors", you first see the members in your working group. To access other working group members, double-click "entire network" to view all working groups on the network. Double-click the Working Group name to view the members.

You can also leave a working group and change the name of the Working Group. However, in this way, other people can access your shared resources on the Internet, but only change to a working group. You can add
Any Workgroup on the same network can also be left. A "Working Group" is like a club that is free to join and withdraw. It serves only to provide a "room" to facilitate online computing.
Allows you to browse shared resources.

Domain

Unlike the Working Group's "loose membership", "Domain" is a relatively strict organization. "Domain" refers to the computer combination that the server controls whether computers on the network can join.

Strict management is essential to network security. In peer-to-peer mode, any computer can access Shared resources as long as it is connected to the network, such as Internet access through the shared ISDN. Although shared files on a peer-to-peer network can be used with access passwords, they are easily cracked. Data in an equivalent network consisting of Windows 9x is extremely insecure.

In "Domain" mode, at least one server is responsible for the verification of each computer connected to the network and the user, which is equivalent to the guard of an organization, called the "Domain Controller (Domain Controller)
Controller, abbreviated as DC )". The domain controller contains a database consisting of the Account, password, and computer information of the domain. Domain Controller when the computer is connected to the network
First, identify whether the computer belongs to this domain, whether the user's Logon account exists, and whether the password is correct. If the above information is incorrect, the domain controller rejects the user from logging on to the computer. Cannot log on
You cannot access resources on the server that are protected by permissions. You can only access resources shared by Windows in the same way as Internet users. This protects network resources to a certain extent.

It is not enough to add a computer to the domain so that it and the server can see each other on the "Network Neighbor". The network administrator must perform operations related to adding the computer to the domain. The operation process consists of server-side settings and client settings.

1. Server Side settings

Windows 2000 with Active Directory configured as the system administrator
Log on to the Server and click "Start/Program/management tool/Active ".
Directory user and computer, right-click computers on the program interface, click New/computer in the pop-up menu, and enter the name of the computer to be added to the domain
You can. The name of the computer to be added to the domain must be in English. Otherwise, the system prompts that the Chinese computer name may cause some problems.

2. Client settings

First, check whether the computer name is correct. Then, right-click "Network Neighbor" on the desktop and click "properties". The network attribute settings window appears, confirm that "primary network logon" is "Microsoft network user ".

Select "Microsoft network user" at the top of the window (If this option is not available, it indicates that it is not installed. Click [add] to install "Microsoft network user ). Click
[Properties] button, the "Microsoft network user properties" dialog box appears, select the "log on to Windows NT domain" check box, in the "Windows
Enter the domain name to log on.

Windows
98, you will be prompted to restart the computer. After the computer is restarted, a logon dialog box will appear. After entering the correct domain user account, password, and login domain, you can use Windows 2000
The resources in the Server domain. Note that the domain user account and password must be the account and password created by the network administrator for the user, rather than the account and password created by the local user. If no
An error occurs when a computer is added to the domain, or the domain name, user name, or password used for logon is incorrect.