If you like DNray Forum, you can support it by - BTC: bc1qppjcl3c2cyjazy6lepmrv3fh6ke9mxs7zpfky0 , TRC20 and more...

 

Pros of Switching to Win Domain

Started by langergrp, Jun 06, 2023, 07:30 AM

Previous topic - Next topic

langergrpTopic starter

There are approximately 100 laptops scattered across different cities that need to be connected to the same domain and configured with portable profiles. The standard set of programs includes Skype, MSOffice, and a browser, along with a few software programs for remote administration and statistics collection, such as TeamViewer and Stuffcop.

Currently, each laptop is operating independently, with various configurations and often filled with junk and viruses. Administering each laptop requires payment for each call, which can be inconvenient and expensive. The solution being considered is to connect all the laptops to one network and restore order, likely through a corporate assembly with essential programs and access for remote administration. Additionally, transitioning to a domain offers benefits like decoupling from a specific computer, enabling individuals to access their working environment on any laptop while on business trips.

Another advantage is mass management, where adding programs like jabber is simplified by applying them to the entire domain at once. However, since the speaker is not familiar with the capabilities of a domain, they would like to know more about its pros and cons from knowledgeable sources.
  •  


Charlesth

Do we require a network diagram? Will the server for user profiles be centralized or region-based? Can we estimate how slow the profile filling process would be with poor connectivity? What is the maximum number of laptops that can operate beyond the network?

However, suppose a user needs to use their laptop while traveling outside of the network. In that case, it becomes challenging for them to access documents from their profile. What should be done in such situations?

Additionally, it is critical to determine the time required for the laptop to be restored.
  •  

fizzer

My esteemed colleagues, I believe we may have slightly exaggerated our system requirements in this instance, despite our appreciation for Microsoft and Active Directory. My suggestion would be to commence with implementing centralized antivirus software, without involving roaming profiles and AD at the initial stage.

For instance, Trend Micro and other similar software can efficiently perform tasks such as virus removal, updates, website blocking, and additional software installation without requiring advanced technical knowledge. Furthermore, there are various cloud-based solutions available from Antivirus Companies.

While it is conceivable to integrate this software with AD deployment, combining it with roaming profiles will only lead to complications. Roaming profiles are best suited for environments with gigabit connections between servers and clients, and can result in issues when multiple users log in simultaneously in the morning.

If centralizing user operations quickly is imperative, terminal solutions may be considered.
  •  

Kingvers

Although I haven't worked with AD for some time, here are my recommendations:

1. You could try grouping all your users into a domain and giving them regular user rights.
2. To avoid any security issues, you should restrict users from launching applications from folders other than Program Files and Windows. If using Dropbox, install it in another folder or make an exception for it if possible.
3. In addition, you could limit the size of profiles and relocate the Desktop folder for better organization.
4. Lastly, create a guest account for when you need to use a computer somewhere else.

One benefit of this setup is that it allows for centralized software management and group policies for programs like Google Chrome and Skype. There's also a reduced risk of malware.

Here's a little hack: if your antivirus is centrally managed, you can add any unwanted software as a dangerous object, and it will be removed automatically after installation.

However, there may be some challenges when it comes to profile configuration.
  •  

design2xhtml

I can provide insight into the pros and cons of transitioning the laptops to a domain network.

Pros:
1. Centralized Management: With all laptops connected to the domain, system administrators can centrally manage user accounts, security policies, software deployment, and updates. This ensures consistency across all devices and reduces the time and effort required for individual laptop administration.

2. Portable Profiles: Users can access their personalized working environment from any laptop within the domain, providing flexibility and convenience, especially for business travelers who need to use different devices on the go.

3. Enhanced Security: By implementing domain-wide security policies and restrictions, the risk of malware infections and unauthorized access can be significantly reduced. Centralized monitoring and control tools, such as remote administration software, can help identify and resolve security issues proactively.

4. Scalability: The domain architecture allows for easy scalability, enabling the addition of new laptops and users without extensive reconfiguration. This is particularly beneficial for growing businesses or dynamic work environments.

Cons:
1. Initial Setup Complexity: Transitioning to a domain network requires careful planning, configuration, and testing to ensure a smooth migration process without disrupting existing operations. It may involve additional hardware, such as domain controllers, and initial downtime during the transition.

2. Dependence on Network Reliability: Since domain authentication and access control are reliant on network connectivity, any network outages or disruptions can impact user access and productivity. Implementing robust backup and redundancy measures is crucial to mitigate this risk.

3. Ongoing Maintenance: While centralized management offers efficiency, it also requires ongoing maintenance and monitoring to ensure the domain remains secure, updated, and optimized. This includes regular backups, software patches, and user support.

4. Potential Compatibility Issues: Certain legacy or specialized software may have compatibility challenges within a domain environment. Compatibility testing and remediation may be necessary to ensure all required programs function seamlessly within the domain.

Transitioning the laptops to a domain network offers numerous benefits in terms of centralized management, security, and flexibility. However, it requires careful consideration of the initial setup, ongoing maintenance, and potential compatibility issues to fully leverage its advantages. Engaging with experienced network engineers and domain specialists during the planning phase is essential to address these considerations effectively and ensure a successful transition.
  •  


If you like DNray forum, you can support it by - BTC: bc1qppjcl3c2cyjazy6lepmrv3fh6ke9mxs7zpfky0 , TRC20 and more...