Domain network questions

coldfireuk · Nov 10, 2004, 11:54 AM

Hey guys, I've just set up a Domain network at work but there are a couple of things I want to do now that I can't figure out:

1)How can I disable people logging on locally in Normal mode.
2)I want to connect our wireless modem/router to the domain server and then share the connection from there... how can I do that?! I've tried plugging in a separate Network Card and connecting the router directly into that, but i just can't get the other machines working on the internet.

Any help with this would be most apreciated.

MiDKnYtE · Nov 10, 2004, 08:02 PM

what kind of domain is it? win2k, win2k3, ???

where and why do you want to prevent people from logging in locally? I'm guessing you're using win2k or xp. if anything, you would need to look at the group policies. run gpedit.msc and search for the "log on locally" or "log on interactively" option.

are you using dhcp from the router or the DC? obviously, you need to set a static IP for the server. If anything, you could use the router for dhcp and internet, then tag the server onto that with a static IP in the same range.

coldfireuk · Nov 11, 2004, 12:18 PM

Sorry for the lack of info. Its a Win2K3 server for a small company. The reason for stopping local logon is to stop access to any systems unless its through logging on to the domain; just a measure to protect data etc. Ill give 'gpedit.msc' a go right now!!

DHCP is doen through the router at the moment, however i want to change this so that the server is responsible for dhcp. The server has a static IP of 192.168.0.5 the router has a static ip of 192.168.0.1. I was going to tag the router onto the server via a second LAN card, however this meant that no other machine on the network could have LAN access.

Sorry if this is insanely mundane, I'm not too ofay with Domain servers and to say I was a little out of my depth would be an understatement!! Many thanks.

MiDKnYtE · Nov 11, 2004, 12:58 PM

you should set a domain policy instead of local policies. policies are set by local-site-domain-OU. therefore, the domain policy would override any local policies.

I think that if you restrict logon locally, then the users won't be able to log on at the workstation. that policy should only be set for the server, since you don't want non-admins on there. unless you created a local account, they couldn't log on to the workstation without going through the domain.

why do you need the server to do dhcp? You should just leave it as is. otherwise, you gotta run a second nic in the server and do NAT. I think it's much easier to just have the router do dhcp.

here's a good info site for win2k3:

http://labmice.techtarget.com/

coldfireuk · Nov 11, 2004, 03:38 PM

Thanks, that website is going to come in very handy! One last question for you... sorry. I've been using 'gpedit.msc' but all of the security settings appear to be locked. I'm siged in as Administrator... why is this? And how can I unlock these settings?!! Thanks for all your help so far.

MiDKnYtE · Nov 11, 2004, 11:29 PM

make sure you are going into the domain policy and not the local policy. like I said, domain will override local policies. gpedit.msc is probably taking you into the local policy. I don't have a win2k3 system in front of me right now. can't help you with specifics at the moment.

try this. go into ad users and computers. right click on the domain and click properties. there should be a tab for group policy. adjust settings there.

Nov 10, 2004, 11:54 AM	#1
coldfireuk DriverHeaven Junior Member Join Date: Nov 2003 Posts: 63 Rep Power: 0	Domain network questions Hey guys, I've just set up a Domain network at work but there are a couple of things I want to do now that I can't figure out: 1)How can I disable people logging on locally in Normal mode. 2)I want to connect our wireless modem/router to the domain server and then share the connection from there... how can I do that?! I've tried plugging in a separate Network Card and connecting the router directly into that, but i just can't get the other machines working on the internet. Any help with this would be most apreciated.

Nov 10, 2004, 08:02 PM	#2
MiDKnYtE Caffeine Machine Join Date: Oct 2004 Location: Hell is empty. All the devils are here. Posts: 670 Rep Power: 0	what kind of domain is it? win2k, win2k3, ??? where and why do you want to prevent people from logging in locally? I'm guessing you're using win2k or xp. if anything, you would need to look at the group policies. run gpedit.msc and search for the "log on locally" or "log on interactively" option. are you using dhcp from the router or the DC? obviously, you need to set a static IP for the server. If anything, you could use the router for dhcp and internet, then tag the server onto that with a static IP in the same range.

Nov 11, 2004, 12:18 PM	Thread Starter #3
coldfireuk DriverHeaven Junior Member Join Date: Nov 2003 Posts: 63 Rep Power: 0	Sorry for the lack of info. Its a Win2K3 server for a small company. The reason for stopping local logon is to stop access to any systems unless its through logging on to the domain; just a measure to protect data etc. Ill give 'gpedit.msc' a go right now!! DHCP is doen through the router at the moment, however i want to change this so that the server is responsible for dhcp. The server has a static IP of 192.168.0.5 the router has a static ip of 192.168.0.1. I was going to tag the router onto the server via a second LAN card, however this meant that no other machine on the network could have LAN access. Sorry if this is insanely mundane, I'm not too ofay with Domain servers and to say I was a little out of my depth would be an understatement!! Many thanks.

Nov 11, 2004, 12:58 PM	#4
MiDKnYtE Caffeine Machine Join Date: Oct 2004 Location: Hell is empty. All the devils are here. Posts: 670 Rep Power: 0	you should set a domain policy instead of local policies. policies are set by local-site-domain-OU. therefore, the domain policy would override any local policies. I think that if you restrict logon locally, then the users won't be able to log on at the workstation. that policy should only be set for the server, since you don't want non-admins on there. unless you created a local account, they couldn't log on to the workstation without going through the domain. why do you need the server to do dhcp? You should just leave it as is. otherwise, you gotta run a second nic in the server and do NAT. I think it's much easier to just have the router do dhcp. here's a good info site for win2k3: http://labmice.techtarget.com/

Nov 11, 2004, 03:38 PM	Thread Starter #5
coldfireuk DriverHeaven Junior Member Join Date: Nov 2003 Posts: 63 Rep Power: 0	Thanks, that website is going to come in very handy! One last question for you... sorry. I've been using 'gpedit.msc' but all of the security settings appear to be locked. I'm siged in as Administrator... why is this? And how can I unlock these settings?!! Thanks for all your help so far.

Nov 11, 2004, 11:29 PM	#6
MiDKnYtE Caffeine Machine Join Date: Oct 2004 Location: Hell is empty. All the devils are here. Posts: 670 Rep Power: 0	make sure you are going into the domain policy and not the local policy. like I said, domain will override local policies. gpedit.msc is probably taking you into the local policy. I don't have a win2k3 system in front of me right now. can't help you with specifics at the moment. try this. go into ad users and computers. right click on the domain and click properties. there should be a tab for group policy. adjust settings there.