add domain user to 2008 server not on domain

January 25, 2010 at 10:56:59
Specs: Windows XP
We have Windows 2003 Servers as our domain controllers. We are purchasing a Windows 2008 server that cannot be on the network due to the content that it is going to hold. We need to give domain users access to the server and its content. What is the easiest way to have this setup for me and the least troublesome for the end users. Thanks...

See More: add domain user to 2008 server not on domain

Report •


#1
January 25, 2010 at 11:16:50
"Cannot be on the network"

Please clarify what you mean. Do you just want the 2008 server separated from the existing LAN? Or just not accessible from the Internet? Or do you want it on the same LAN, but not allow all existing users access to its resources? ....

-Ryan Adams

Free Computer Tips and more:http://RyanTAdams.com
Paid Tech Support: Black Diamond


Report •

#2
January 25, 2010 at 11:23:21
Ignoring the double negative of server can't be on network yet you want to assign users to it...

Make it a member server of the domain and only put users on it you want to access it.


Report •

#3
January 25, 2010 at 11:24:01
Yes, this will be on the existing LAN we just cannot have it on the domain as it is will be our Executives file server. However, their accounts are on the domain.

They do not want the content on this server being on the network. They want access resricted everyone except that department (with the addition of myself and one other). I guess option three is what we are looking for...

"Or do you want it on the same LAN, but not allow all existing users access to its resources"


Report •

Related Solutions

#4
January 25, 2010 at 12:02:19
asthelen you are missing a number of key concepts concerning networking and Active Directory.

Yes the server will be on the lan
Yes you will assign only the domain users you want assigned to the server.
Yes you will deny all other users from this server.

In other words you want this server as a member server of the domain so you CAN control access to it.

This is not a matter of not having it on the lan. You can't do anything with that concept.


Report •

#5
January 25, 2010 at 12:12:24
As pointed out above, you do want the server to be physically plugged into the same wiring as your other server and you do want it logical connected to the same domain. When you set up resources on the new server (shared folders, or what ever) you will be able to pick and choose who can/can't access those resources from the domain users (aka, the users you already have on the other server).

-Ryan Adams

Free Computer Tips and more:http://RyanTAdams.com
Paid Tech Support: Black Diamond


Report •

#6
January 25, 2010 at 15:13:26
Adding a computer to the domain does not give everyone in the domain access to it. As wanderer said, it should be on the domain so you can access it and control the security.

Add it to the domain and assign those users access to the things they need. Based on your questions, if this is that important of a server regarding the information it contains, you might want to get some help from a consultant to secure it.


Report •

Ask Question