Domain vs workgroup logon

[Jeff Hester]

Question: I currently run a Windows NT (small business server) network with
a few new XP users. If I
have the XP users log into the domain, they are all lumped together with no
apparent way of separating them into their respective groups, ie accounting,
HR, etc. If, however, I have them log into their specific workgroup, then
they can be sorted accordingly. Is there a way to have the XP users log into
the domain and still be able to be separated? Thanks for any info...

[Paul Russell]

You should simply create user groups to help seperate user types in the
domain,

[ FOO DOMAIN ]

[ HR - group ] [ IT group ] [ Acct group ]

Bob is in HR
Judy is in IT
Jeff is in Acct

You can specify policy and log on features based upon individual groups.

By going with a single domain, you keep things really very secure and you
have more administritive control / flexibility by doing it this way. If
your company is large with decentralized organization or IT (e.g. branch
sites) then a mixed user domain model (MUD) or an AD forest model may work
for you.

If that doesn't help you let me know.

Paul.


"Jeff Hester" > wrote in message
...
> Question: I currently run a Windows NT (small business server) network
with
> a few new XP users. If I
> have the XP users log into the domain, they are all lumped together with
no
> apparent way of separating them into their respective groups, ie
accounting,
> HR, etc. If, however, I have them log into their specific workgroup, then
> they can be sorted accordingly. Is there a way to have the XP users log
into
> the domain and still be able to be separated? Thanks for any info...
>
>