Koozali.org: home of the SME Server

workgroup/domain

Offline cattledog

  • ***
  • 70
  • +0/-0
workgroup/domain
« on: December 08, 2017, 10:57:31 PM »
Hi all,  This may be a stupid question but here we go.  If we decide to use sme as a workgroup server instead of domain server are the users that are added to server used or is the windows client using local credentials for logon?  What I want to do is that each user has password checked by server.

Offline mmccarn

  • *
  • 2,656
  • +10/-0
Re: workgroup/domain
« Reply #1 on: December 09, 2017, 12:24:49 PM »
In workgroup mode all windows logins will require local accounts.

The specific difference between a 'workgroup' and a 'domain' is that in a domain, each workstation is re-configured (during the 'join' procedure) to 'trust' the domain controller. 

The purpose of this workstation-to-server "trust" relationship is to let the domain controller tell the workstation 'yes - this user is permitted to login'. 

In 'workgroup' mode, this trust relationship has never been created, so the windows computer has no reason to listen to anything the server says.