11.1 Joining a Windows Workstation to a DSfW Domain

Kerberos authentication requires that the domain controller’s time and the Windows workstation’s time be synchronized. After the DSfW server is installed, verify that the Windows workstations in the domain are set to get their time from this server.

You must ensure that the workstations joined to a DSfW domain have a unique machine name. A duplicate machine name will lead to an unstable domain and slow workstation logins. If you attempt to join a machine with a duplicate name to a DSfW domain, no warning or error messages will be displayed.

In case you experience slow workstation logins because of duplicate machine names in your environment, you can enforce intruder lockout. For more information, refer to the TIDhttp://www.novell.com/support/viewContent.do?externalId=7006851.

NOTE: A duplicate machine name may get assigned due to reuse of the machine name or re imaging the machines in a virtualized environment.

Execute the following steps to join a Windows workstation to a DSfW domain:

NOTE:The steps might vary depending on how you have Windows configured. The examples shown are for the Windows “classic” desktop.

  1. From a Windows computer on the same network as the DSfW server, go to Network Connections in the Control Panel, select Local Area Connection, and click Properties.

  2. Select Internet Protocol (TCP/IP) and click Properties.

  3. Select Use the following DNS server addresses. For the Preferred DNS Server, enter the IP address of the DNS server configured for DSfW, then click OK.

  4. From the Start menu, right-click My Computer and select Properties.

  5. On the Computer Name tab, click Change.

  6. In the Computer Name Changes dialog box, select Domain, enter the DSfW domain name, then click OK.

  7. When prompted, provide the name and password for an account with permission to join the domain. This is the Administrator and password configured when you installed DSfW.

  8. A welcome message is displayed after the computer has successfully joined the domain. Click OK to continue.

  9. As prompted, click OK to restart the computer for the changes to take effect.

The computer you just joined to the domain has an object created for it in the Computers container in the DSfW domain.

A user with administrative privileges for the container that is being name-mapped can join a workstation to the domain being created.

NOTE:When you install Windows XP, it prompts you to select whether it is part of the workgroup or the domain. If domain is selected, it reports that an invalid domain is specified. However, if there is an existing Windows XP machine installed, it is possible to join this workstation to the domain.