DOMAIN AND WORKGROUP

Prepared by Baguma Innocent

What is Workgroup
A Workgroup has no dedicated server's to
track users and such, it's all done via each
client machine on the LAN, and this
includes shared objects and user logons.
Advantage, cheaper to run and maintain
as you only need two machines running in
the same workgroup to be called a
workgroup.

Prepared by Baguma Innocent

What is Domain

A Domain is a specific NAME given to a

LAN that includes one or more Domain
Controllers (Servers). The advantage is
that you have a dedicated server to
log/track all users and shares via Active
Directory and you can also use this server
for other things such as a SQL server
etc... The disadvantage to this is the cost
and maintenance required to keep this
configuration running.
Prepared by Baguma Innocent
Advantages of workgroup

 Useful for small networks (10 or less

computers)
 Very easy to setup
 No additional knowledge required
 No server required.

Prepared by Baguma Innocent

Disadvantages of workgroup
of workgroup
 Need to setup account and password on each
and every machine.
 Passwords can become out of sync, if
changed on one computer and not others.
 No easily scalable. If using more than 10
computers, the number of accounts to set up
increases a lot more.
 More time required to setup for new users!
 If using file sharing, you may reach the 10
max simultaneous connections limit
Prepared by Baguma Innocent
Advantages of Domain

 One location for all user accounts, groups and

computers.

 Passwords are same for all computers.

 Easier and quicker to maintain.

 Scales easier if you add more users and

computers.

 Very high Security in sharing and personal

settings

Prepared by Baguma Innocent

Disadvantages of Domain

 Requires a windows server.

 Complex to set up.

Prepared by Baguma Innocent

 WORKGROUP-BASED
NETWORKS
 WORKGROUP-BASED NETWORKS are a more simplified approach to
server-based networking, which are often much faster to setup for the
average user in the short-term, but may require more time for
administrative tasks in the long-run.
 Workgroup Networks consist of any logical collection of Workstations and
Workgroup Servers.
 Any computer on the network can join an existing workgroup as long the
workgroup naming convention is maintained for each member throughout
the workgroup. Any workgroup member may access Workgroup Server
resources so long as the user supplies authenticated credentials for server
login.
 Although not performed through Active Directory, Workgroup Servers
contain a standard set of centralized management tools for the
administration of security policies which individual, or groups of users may
require in order to gain authenticated login access to resources located on
the Workgroup Server itself.
 Any Workgroup Server with Windows 2000 Server installed, can be
promoted to take on the role of a Domain Controller if a network
administrator changes the network model from a Workgroup to a Domain-
based topology.

Prepared by Baguma Innocent

DOMAIN-BASED NETWORKS

 DOMAIN-BASED NETWORKS are vastly more complex to setup for the average user
in the short-term, partly due to the more highly technical- nature inherent to server
role promotion, but may ultimately save in administrative time over the long-run if
the users manage to learn how to make more effective use of Active Directory’s
robust management features

 Domain Networks can be created and managed by promoting any Workgroup Server
to the role of a Domain Controller or Primary Domain Controller (PDC). Servers
designated as Primary Domain Controllers contain a more thorough and complex set
of security and administrative properties which the simplified Workgroup Server does
not have.

 Each Domain must have at least one designated PDC Server within its Forest for
centralized user account management through the AD. Domains share a hierarchal
directory of databases, security policies, and common security relationships with
other sub-Domains.

 A PDC provides access to a centralized user account and workgroup account policy as
maintained by the Domain Administrator predominantly from the AD Server itself.
Because Domains use a hierarchy of parent-child relationships within a Domain
Forest, AD Domains are generally recommended and most effectively used by larger
organizations where collaborative computing between numerous workgroups must
span multiple departmental servers with common sets of relational security policies
in place.

Prepared by Baguma Innocent