How do I setup a PC to be able to select multiple domains? 2

[NetAdmin2004]

I need to setup some of my clients to logon to more than one domain. How do you add more than one domain in the drop down list on the Windows 2000 client and does this have any effect on my DCs? I have seen this before but never implemented.....

 

[dholbrook]

The number of domains that appears in the logon window depends on the doamins being trusted or trusting with your Domain.

How the trust is added depends on the OS being used, as NT and Win2000 are different. In Win NT, only one way trusts are established, and you need to be an Admin level in each domain to set the trust up either direction. In order for the domain to show up in the client window, the second domain has to "trust" the user's home domain to validate the user.

Wit Win 2000, it depends if you are using AD and Native mode, but the AD configuration trusts both directions between AD Domains once it is established between the domains. Still need Admin level access to establish here too.

HTH

DAvid

 

[kmcferrin]

The computer can only be a member of a single domain. In order to be able to select from multiple domains at logon, you will need to set up trusts between the domain that the PC is a member of and the domains that the users will need to log into. When that happens, the computer will allow users from the trusted domains to log in.

 

[NetAdmin2004]

Makes Sense..... Thanks for your help. I will give it a hot and see what happens. I am running in 2000 mixed mode, not native. I'll give it a shot and see what happens...... Thanks again!

 

[dholbrook]

Netadmin2004,

Are all your Domains in the same Forest?
Are some of them NT and some Win2000? If so, then Win2000 also allows you to set a one way trust with the NT Domains (in either or both directions).

I would recommend you put all the users into the WIN2000 Domain and set the NT Domains to trust the WIn2000 Domain, and not set the trust the other direction...helps with controlling unwanted access from the wrong direction.

If all the Domains are WIN2000, then establishing trust between the WIN2000 Domains will automatically be in both directions.

Let us know how you make out.

David