Do I really need AD or a Domain?

[Nutthick]

I'm setting up a small system (1 server and 4 permanent users), but will have several users coming and going as they please. All the system is to do is to file/printer share and allow VPN access. Do I really need to go to the hastle of converting to a DC and using AD? I have been told that once users are on a domain, they cannot install their own software, without being system wide administrators. If this is true, I don't want to have to do it. Does anyone have any advice?

Thanks

 

[NickFerrar]

I'd just stick with a Workgroup for a single server network, AD only really makes sense with multiple servers so you only need to worry about one set of accounts for all servers etc.

Even with AD though users could still install software on their computers, you'd just need to give them local admin rights.

 

[Nutthick]

Thanks Nick. I was thinking it would make things a bit too complicated. I presume VPN will work OK without a domain.

 

[NickFerrar]

It should do but it might depend on what you're using to create the VPN - if it's a router with VPN functionality etc (or a Checkpoint VPN-1 box) then it will be fine, if you're doing it within Win2k Server or something that might require AD to be in place, not sure.

 

[yostyid]

Not sure if i read the question correctly, but we have vpn setup on windows 2000 server and we only use a workgroup. Our only problem is that our gateway only allows 1 vpn pass though at a time. Hope this helps..

 

[Nutthick]

Thanks yostyid, that's encouraging. I'm feeling pretty confident now (sounds a great way to be disappointed). I've configured an AD system before with multiple VPN, so from what you say it sounds like it should work. Fingers crossed.

 

[Nutthick]

Hi Guys

Just to say thanks and let you know it all went sweetly. VPN worked fine without AD, actually everything did.

Thanks again

nutthick