Domain Authenticion

We are running a number (approx 300) W2K Pro PCs that get their policies using Novell NDS. The version we are using creates a dynamic local user profile on the PC. I want to be able to log the users on to a domain without actually using any resource, almost the equivalent of the Win 9x net logon command. Reason is that I need them to be able to access resources in another domain in a different location without being challenged every time they access them (Trusts/permissions all exist). If all else fails I can do a net use to something in their own location just so it passes those credentials over but it seems a bit of a waste of resource.

Any ideas??

 

What do you exactly do you mean "challenged" when you say

Are they getting prompted for login information?

 

Yes, at the moment they get prompted for login information every time they use a network resource.

Scenario:

User1 needs access to multiple shares in Domain2
If Workstation1\User1 tries to use a resource in Domain2 he gets a logon request each time.

If I put a net use for domain1\user1 (same password) in the NetWare login script he/she can access all the areas we want via trust/permissions etc. without prompting.

Just trying to get rid of the fact I'm actually having to do a net use to a share on a server in domain1, really just want authentication to domain1 in the login script

 

If you're getting a prompt there is something wrong with either the trusts and/or permissions. Make certain Domain2 trusts Domain1.

Are you running Windows 2000 servers in each domain or are all of your servers NetWare?

 

Reason we're getting a prompt is that ZenWorks (part of Novell) is creating the user as a local - rather than domain - user. I just need to be able to get a domain credential passed around. As it happens there is a mix of NT and W2K boxes in the relevant domains, however the primary logon is Novell.

 

Ok, on the surface this does not appear to be a Windows issue but rather a Novell problem. What will determine the root of the problem is if you can tell if the authentication the users are being prompted for are coming from the Microsoft side or the Novell side. Unfortunately I'm not well versed in Novell NetWare or ZenWorks so I won't be much help in that area. However, when you say that ZenWorks is creating local users rather than domain users that sounds like a potential issue to me.

 

It's us trying to do it on the cheap . If we were to actually buy the latest version of ZenWorks, rather than use the free 'lite' version we would get Domain users created.