Q

Instrumentation techs cannot rejoin data network

I am running a Windows NT network. We have a SCADA (supervisory control and data acquisition) system in place that runs on its own workgroup. The laptop PCs that our instrumentation department uses have Windows XP Pro installed on them. The instrument techs switch between the data network (domain) and the SCADA network (workgroup) frequently.

When the instrument techs want to join the SCADA workgroup, they are able to drop the domain (they are local admins) and join the SCADA workgroup, and all works well. However, they cannot join the domain again when they need to because they are not domain administrators! I checked server manager and I see their workstations there, so I don't understand why they can't simply change back to the domain. Any ideas?

The system account still remains in the domain even after the client switches to the workgroup. However, you have to grant the user full domain administrative privileges to be able to rejoin the domain. That's a limitation with Windows NT -- no individual administrative privilege delegation capability. In an NT domain, I don't know of a means to resolve the problem, other than granting end users full admin access, which is a security violation, a political issue and not a wise activity to take in most environments.
This was first published in October 2002

Dig deeper on Microsoft Group Policy Management

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close