Joining the URI Domain
From ITS Wiki - Information Technology Services - University of Rhode Island
Template:Networking This article explains how to join the URI Domain on a Windows XP computer. Those wishing to join the domain on a computer running Windows Vista or Windows 7 should follow these directions however some of the icon names will be different.
- 1 Windows XP Instructions
- 1.1 WINS Setup
- 1.2 DNS Setup
- 1.3 Computer Name
- 1.4 Logging In
- 1.5 Domain Quick Facts
- 1.6 Adding a Domain User to the Local Administrator Group
- 1.7 Changing the Name of the Default Administrator's Account
- 1.8 User Profile Quick Facts
- 1.9 Transferring Profiles from One User to Another
- 1.10 Problems with Profiles
Windows XP Instructions
1. Be sure you are connected to the network via ethernet.
2. Go to Start > Settings > Control Panel, and double-click the Network Connections icon.
3. Locate the Local Area Network icon, right-click, and select Properties from the menu.
4. Select the Internet Protocol TCP/IP so it is highlighted and then click the Properties button.
5. Confirm that all your IP address information is correct, then click on the Advanced button at the bottom of the window, then on the WINS tab of the Advanced TCP/IP Settings window.
6. Click the Add button, which will open a dialog screen allowing you to enter the IP addresses of the WINS servers on campus. The Primary WINS address is 18.104.22.168 and the Secondary WINS address is 22.214.171.124. You will have to click the add button twice to enter both addresses. Hit the enter key once you have supplied the complete address.
1. The Enable NetBIOS over TCP toggle button should be selected.
2. To join an active directory domain, you need the IP address of the DNS controller that contains the active directory information. Click the "Use the Following DNS server Addresses" toggle button and type in the following.
Preferred DNS server address - 126.96.36.199 Alternative DNS server address - 188.8.131.52
3. Click the Advanced tab at the bottom of the Internet protocol TCP/IP Properties window.
4. Check the "Append these DNS suffixes in order" tab. Enter the follow suffix, uri.ds.uri.edu (do not enter uri.edu or ds.uri.edu as shown in the screen dump).
5. Check the "Register this connection's address in DNS" check box.
6. Click OK until you have closed the Local Area Properties window.
You have to log on the local computer domain as a local administrator to join a domain. If the computer has previously been configured for the network it may not have the correct computer name set in the configuration, it must match the name specified for the computer account on the Application to Add User ID form. If you need to change the local machine's computer name or join a Domain:
1. Right-click on the Start button and then right-click My Computer in the menu, and select Properties on the task menu that appears.
2. Click the Computer Name tab to reveal your current computer name and workgroup or domain that you belong to. You should be in a workgroup at this point.
3. Click the Change button to open the Identification Changes window.
4. Enter the computer name listed on your Application to Add User ID form.
5. Restart the computer as the local administrator.
6. Return to the "My Computer" Properties page and select the Domain toggle button. Enter "uri.ds.uri.edu" in the text box supplied. Click OK.
7. When prompted for the name and password of an account with permission to join the domain, use the following,
UserName=installer Password =$1Thousand
In the Computer Name Changes window you must enter the UserID and password in your e-mail reply to the Application to Add User ID form. This can be different from the administrator's account on the local machine. The process of joining a domain may take a few minuets to complete. If all your settings are correct you should get a window that welcomes you to the domain.
At this point you will be asked to restart the computer so that the changes can take effect. Restart the computer.
1. When the login screen comes back up click on the Options button. You will now see a choice of Domains to log into.
2. By holding down the arrow next to the domain text area you can choose between the local domain (which is the same name as the computer name) and the network domain to log into.
3. Choose the new network domain to log into and use the username and password supplied to you in the Application to Add User ID form. Click the OK button you should now log into the Network domain.
Logging onto the Network Domain with your user new username and password allows you to enter the domain with only limited access to the local computer domain. If you want the new user to have administrative rights to the local computer you need to add the domain user account to the local administrators account.
Domain Quick Facts
- Once you join the domain, most users are given the default rights of the domain user group.
- The domain user group does not have administration rights to the local machine.
- By default the domain users groups can do simple tasks such as work in applications on the local computer. They cannot install programs, or see all files.
- The Domain User account can only access the local computer by logging on to the domain from that computer.
- Most new domain users will need to have administrative access to the local computer. To give the new domain user more privileges their account needs to be added to the local administrators group.
- By default, any domain user can log onto the domain from any computer that has joined the domain.
- Once the user loges on for the first time to the domain, configuration and preference information is saved to a folder on the local computer domain. This saved copy is used in the eventuality that the network goes down. The user will still be able to log onto the computer using the cached user account information called a user profile.
- New domain users, who need to install programs, perform configuration tasks and overall maintenance of the computer, should be added to the local computers administrators group.
Adding a Domain User to the Local Administrator Group
As mentioned, once you join the domain, the User Accounts window changes to resemble the more familiar screen used in Windows NT/2000 to administer user accounts.
1. Log into the local computer domain as an administrator to add a domain user to the local computer domains administrators group.
2. Click on the Start button and go to the Control Panel and click on the Users Accounts Icon.
3. This will open the Users Accounts window. All of the locally stored user accounts are listed in this window.
4. Click on the Add Button to reveal the Add New User window.
5. Type in the computer user's URI Domain user ID that you want to add to your local administrator group.
6. Type in the domain name URI in the Domain text field. Click OK.
7. Click the toggle button other, and make sure "Administrators" is listed in the text field at the right. (Default) Click Finish.
8. The User account will come up and it will have listed the new Administrator from the URI Domain. Click OK.
After you have confirmed that you can log into the local computer with the newly assigned administrator's account, you can proceed to rename the administrator's account on the local computer domain. For security reasons it is advisable to rename this account so no one knows the default administrator's name. Only after you join the domain are you given the option of changing the default administrator's name. It is acceptable to make the New Domain user or a local Technical Support Specialist the name of this Administrator's account, depending on who will be the first line of support for the local computer.
Changing the Name of the Default Administrator's Account
1. Log into the computer using an administrator's account.
2. Go to the Start button and chose the Control Panel icon.
3. Click on the Users and Password icon.
4. Double Click on the Administrator's account to open its properties.
5. Change the name of the Administrator's account by typing the new name for the account in the User name field. Click the OK button.
The new account name will be listed in the User Accounts window. You can now log onto the local computer domain using this new administrator's name. Log off and test the new Administrators name and password, by logging into the local computer domain. Each user account has a unique profile that allows each user to set up the desktop and configure their applications to their desired settings.
User Profile Quick Facts
- The My Documents folder on the desktop, Outlook e-mail settings, Browser bookmarks and a variety of other personal settings and cached passwords are saved in the user profile.
- Domain user accounts and local user accounts are treated as two separate user accounts having their own separate profiles. The new domain user profile is different from the local user, so none of the local profile information is transferred to the new Domain account.
- If a user has currently been using and configuring their desktop using their local account, that profile is saved in the Documents and Settings folder of the root drive, (usually c:).
- You must log on as an administrator of the local computer domain to view and change any of the user profile settings.
- Once the user joins a domain a new profile is created for the domain user.
- The main problem with changing your login process for logging into the local computer domain to logging into the Windows NT network domain is that all the information concerning the local users configured Outlook e-mail and files in the My Documents desktop folder will not be easily accessible to the new Domain user.
- To have access to the old local computer account's information, the new domain user must have the rights to access the profile folders. The local administrator, by default, has rights to access this folder. Even if the domain user is a local administrator, user profile files will be in the Documents and Setting folder under the local domain "user's name" folder, and not easy to get to.
- To make the domain users desktop and files appear the same, as they were when they logged on as a local user, the local user account's profile information must be transferred to the new domain users account profile.
- Before you can transfer application configuration information, such as Outlook, the program must first be installed in the new domain user account. Run the program once to make sure the program sets up it's directories in the profile folder. To transfer the configuration of the local user account you must copy the local user profile to the new domain users profile account.
Note: If several users have used the computer, using one default login account, transferring profile information to one new account may become problematic.
Transferring Profiles from One User to Another
1. Click on the Start Button and go to the My Computer Icon.
2. Right-click the My Computer Icon on the desktop. Click on the Properties selection of the task menu.
3. From the System Properties window click on the Advanced Tab.
4. Go to the User Profiles section and click on the Setting Button. Located in this window will be all the Profiles stored on this computer. Usernames are amended with the domain that they belong to, which will distinguish between similar usernames. Any user that has logged into the local computer should be listed here. Note that the domain user account will be amended with a ". DOMAIN NAME". (i.e.: ADMIN-NT-1).
5. Click on the local domain profile (amended with the computer name) you wish to transfer to the new network domain account. After the account is highlighted as your selection click the Copy To button.
6. Click the browse button to locate the profile of the domain user account that you want to place the local profile account into. As mentioned earlier the folder will be in the %RootDrive%/Documents and Settings folder.
7. In the case of duplicate names Local accounts will have the name of the local domain name amended to them. Select the folder with the appropriate name so it is highlighted. Make sure you are selecting the folder named for the domain username; it will be opposite the plus sign. Click the OK Button.
8. You will return to the Change To Window. Before the Domain user can use the new profile an administrator must assign the Domain user the rights to use the local user's profile. Click on the Change button in the "Permitted to use section" of the Copy To window.
7. Before you can enter a user into the object name field you have to choose a location from where you want the user to come from. Click on the Locations button.
8. Click on and highlight the network domain location as the area you want to search for a user to come from. Click the OK button.
9. You will return to the Select User or Group window. Click on the Advanced Button. This will open and advanced Select User or Group window.
10. Be sure that the From this Location text area indicates the network domain and click the Locations button. The enter network Password window will prompt you for a username and password from a user that has access to the domain. Type in the username and password indicated in Application to Add User ID form. Once the username and password are authenticated all the users in the network domain will appear in the Name (RDN) field of the Select User or Group window.
11. Search through the names on the list and find the domain user listed in the Application to Add User ID form. Click on and highlight the user name. Click on the OK button. You will notice the name entered in the object name to select area of the Select User or Group window. Click the OK button.
12. Click on the OK Button in the Copy To window. The Profile for the local domain user will be transfer to the network domain users account.
13. If the computer has been in use for a long time, and has had many users it might be better to go into each profile and copy the needed folders individually, and paste them into the new domain user's account profile. As mentioned, found within the Documents and Settings folder are all the local computer's user profiles.
The individual user profile information folders have several folders in it. The Application Data folder contains configuration information for mainly Microsoft software programs. In this folder you will find an Outlook configuration folder. The Desktop folder contains shortcuts and screen configuration. The Documents folder is the desktop My Documents folder. The Favorites folder contains bookmark information. The Start Menu folder contains start menu configuration information. There may be other folders located in the profile but these are some of the most common ones.
Problems with Profiles
Some users may want to use their computer by logging onto it by using 2 user accounts. The most common scenario for this is that a user that logs onto the domain as well as the local computer. In this case there is no easy way to update the other user profile information once configuration changes are made to one. This new domain user will have a problem because Outlook installs configuration information into the profile folder, resulting in e-mail messages not updating the messages in the mailboxes of each profile. Using a program such a Eudora and installing it into a the root drive outside of the Documents and Settings folder, will allow the user to access their mailbox from any user account. Using the My Documents folder on the desktop will cause all files to be placed under the user profile folder in the Documents and Settings folder. This is where users will have to go to retrieve files in this folder, providing they have rights to that user's folders. Making a Documents folder outside of the Documents and Setting folder and placing a shortcut on each desktop will eliminate the multiple user problem. The best way to retain all your personal information, files and configurations is to always log onto the Domain from your computer every time.