I recently just started at a company that has been using a workgroup for there sharing of files, networking, etc. I am trying to tighten up security so i suggested switching it to a domain. How would i do that on the same server machine without loosing the settings already set for the users (i.e. files, profiles). There only is going to be limited number of administrators so i do not want everyone to be one. Any suggestions, or help please!! Thank you. Christopher Mitchell

You are probably better off leaving it as a workgroup, not so much from a security point of view but from a maintenance and money point of view. Server software and licensing isn't cheap. http://www.microsoft.com/windowsser... Take a look at those prices. The second reason for leaving it is more time is needed to maintain a server running active directory. I manage a network for a small mortgage company which used a domain. When business was getting bad and it was time to upgrade the server, we went back to the workgroup. It saved them a lot of money in software and maintenance. Of course, I'm making less as a result.

You should get 2003 or 2008 training. Security can be breached more easily if you are not fully trained. It is unlikely that there should be more than one or two admins. Most newbies open too much up. You might be better off securing the workstations by using best practices if a smaller place. If the place is a mess you might consider a clean install of everything. Nuke it from high orbit. It's the only way to be sure. "Best Practices", Event viewer, host file, perfmon, are in my top 10

cmmitchell24, If you have the required budget and can afford Windows 2003 or 2008 Server, start building the confidence of financial management about securing the network, so that they feel comfortable in spending X amount in upgrading and being secure. After Windows 2003 or 2008 purchase, start installing it on a separate machine and connect the clients one-by-one. Make a schedule and execute the plan. Good luck. Technology Bytes Plus http://learnitfast.blogspot.com

There is already windows server 2003 on the system. My problem is i want to switch it over gradually onto a domain rather than a workgroup, on the same machine. Can i create a domain and then slowly add users of a workgroup on it? Thats the main questuon. But, Another quick question.... a couple users use gotomypc to access a computer from home. Will they still be able to do that with a domain? Christopher Mitchell

It's not that simple. Workgroups and Domains are different. Your question "Can I create a domain and then slowly add users of a workgroup on it" doesn't apply. The two are mutually exclusive. If you promote the server to a Domain Controller, in order for users to utilize that, you'll need to create a Domain account for each user and add the client computers to the Domain for authentication. That doesn't even take into consideration your current network setup as far as DNS/DHCP are concerned. However, after the Domain is setup and the clients added to the Domain, and the users logged in, you can copy their local profiles to the newly created Domain profile (on the local client of course.) Did you bother searching Google? Look here: http://www.visualwin.com/AD-Control... I really think you should do some serious reading before tackling this. Life's more painless for the brainless.

Yes i agree i have been trying to find reading material. I actually printed out and have been reading the link you added. It was useful but your right after all that the DHCP settings are going to have to change to fit whatever the domain needs. Any reading material on that part of it? Now i know this company is getting another server and i recommend that i put server 2003 on it and setup a domain then add users from the other server to it. Thoughts? Comments? I need all the help i can get. I just graduated but didn't receive a lot of hands on expierince in this sort of stuff. Thank you for everyones help so far. Christopher Mitchell