Needed: One login for network resources from laptop

[Guest frankybaloney]

Hi

 

We are at a dilema regarding teachers laptops. We do not allow teachers to use their laptops on the domain, but they need to access their resources on the network such as printers, shared area etc.

 

The problem is that they need to login with their network username and password everytime they want to access a resource on the network. For example they type their username and password for accessing the shared area, printers, home drive etc.

 

Is there a program of such that if they login once it will log them into all their resources? This program will need to run locally.

 

Hope I made sense

 

Cheers

[dhicks]

See the "Mapping pupils userdrive" thread, where I've just posted a Perl script to do just that. Simply add appropriate commands to connect to each of your resources (i.e. more system("net use ...") commands).

 

This script can be adjusted to be cross-platform, so teachers with machines other than with Windows on can use it too.

 

--

David Hicks

[SYNACK]

If their username and password are the same on the local laptop account as they are on the domain it should authenticate most things automaticly. This excludes Outlook though.

[AnnDroyd]

Hi

 

We do not allow teachers to use their laptops on the domain, but they need to access their resources on the network such as printers, shared area etc.

 

Cheers

 

As dhicks mentioned, a similar question has been asked elsewhere.

 

Out of curiousity, what is the reason for not putitng them on the domain?

 

If you lash up some kind of way for them to connect to the network, the end result is pretty similar, but without the protection of group policies to restrict what they can do.

Edited May 2, 2008 by AnnDroyd

[Guest frankybaloney]

Thanks dhicks, will have to take a look - thought might need some help in setting the script up (not too good with programming)

 

SYNACK - Nope does not work like that as they have authenticated to the local laptop and not AD. So it does not port across the authentication to the domain

 

jwood - The reason for not putting them on the domain is because they use their laptops at home and most the teachers cant figure out between local and domain. Rather have them login locally and also they have admin rights on local so they can install their own broadband software so they can use it at home etc etc

[Ric_]

@frankybaloney: Offline files was invented so that your lusers can have a networked laptop which they can take home and use as if it was connected to the network (homedrive, etc.).

 

The better broadband companies supply ethernet modems for their customers which require no installation (the same is true with wireless).

 

You then don't have the nightmare of potentially unpatched, unprotected (against viruses) machines connecting into your nice secure network.

[maniac]

You can give network users local admin rights by adding them to the local administrators group on the laptop. We actually add a network group to the local administrators group on all our laptops so we can easily control who does and doesn't have local admin access by the members of the group.

 

Mike.

[plexer]

Yup, all of our teacher laptops are domain members locked down.

 

If they want to use the internet at home they can do if it's a wireless one or has a wired ethernet port and as long as it has dhcp enabled.

 

They then use firefox as their browser to save any need to mess with internet explorer proxy settings.

 

Offline files is also enabled.

 

frankybaloney: If your local username and password on a laptop is the same as your domain credentials they do indeed get used to auth you against the domain and it does work.

 

Ben

[SYNACK]

SYNACK - Nope does not work like that as they have authenticated to the local laptop and not AD. So it does not port across the authentication to the domain

 

Worked the last time I tried it, Windows automatically submits the current username and password without the domain info to the system that is requesting authentication. It is only if this UN/PW fails that it prompts for a different account. Could be something different in your networks security settings if this does not work for you.

 

Edit:

I agree with the others that recommend having them domain joined, this is how we have ours set up and it allows us to push out stuff like software updates and required configuration changes automatically without having to do each and every one seporatly. Also offline files can save a huge amount of time dealing with staff that have to bring in edited documents on USB keys and forgetting which version is most up to date.

[BKGarry]

Start > Run Control Userpasswords2 > Advanced > Manage Passwords > Add> use * (just the wildcard *) set the username and password as domain\username

 

There you go all resources use that username and oassword combi