SoFunction
Updated on 2025-04-11

Differences between working groups and domains in LAN

Why set up a LAN? It is to realize the sharing of resources. Since resources need to be shared, there will not be too few resources. How to manage these resources on different machines? Domain and workgroup are two different network resource management models that arise in such an environment. So what exactly is a domain and what is a working group? What is the difference between them?
"Free" Working Group

Work Group is to include different computers in different groups according to their functions for easy management. For example, in a network, there may be hundreds of working computers. If these computers are not grouped, they are all listed in the "Online Neighbors". You can imagine how messy it will be (I'm afraid that the Internet neighbors will also display the "next page"). In order to solve this problem, Windows 9x/NT/2000 referenced the concept of "working group". For example, a university will be divided into such a department of mathematics, Chinese department, and then all computers in the department of mathematics are included in the department of mathematics, and all computers in the department of Chinese are included in the department of Chinese... If you want to access resources from a certain department, find the name of the department's work group in "Online Neighbors", and double-click to see the other computers in that department.

So how can I join the working group? In fact, the method is very simple. Just right-click "Online Neighbor" on the Windows desktop, select "Properties" in the pop-up menu, click "Identification", add the name you want to join in the "Computer Name" column, and add the name of the workgroup you want to join in the "Work Group" column. If the workgroup name you entered is a workgroup that does not exist, it is equivalent to creating a new workgroup, and of course only your own computer is in it. However, it should be noted that the length of the computer name and the working group cannot exceed 15 English characters. You can enter Chinese characters, but it cannot exceed 7 Chinese characters. "Computer Description" is additional information, and it is OK not to fill in, but it is best to fill in some information about the owner of this computer, such as "Mathematics Department Host", etc. After clicking the "OK" button, Windows 98 prompts that it needs to restart. After restarting as required, enter "Online Neighbors" and you can see the members of your work group.

Relatively speaking, members who are in the same working group exchange information the most frequently, so when you enter "online neighbor", the first thing you see is the members of your working group. If you want to access members of other workgroups, you need to double-click "Entire Network", and then you will see other workgroups on the network and double-click the names of other workgroups so that you can see the members in it and implement resource exchange with them.

In addition, you can also exit a work group. The method is also very simple. Just change the work group name. However, in this way, others can still access your shared resources online, but they just changed a working group. That is, you can join any workgroup on the same network or leave a workgroup at any time. The “working group” is like a club that freely joins and exits. Its function is simply to provide a "room" to facilitate the browsing of shared resources by online computers.

Domain management and settings

For example, if the working group is a "free hotel", then the Domain is a "star hotel"; the working group can go in and out at will, while the Domain needs strict control. The real meaning of "domain" refers to the combination of computers that server controls whether computers on the network can be joined. When it comes to combinations, strict control is bound to be required. Therefore, strict management is very necessary for network security. In peer-to-peer network mode, as long as any computer is connected to the network, other machines can access shared resources, such as shared Internet access. Although shared files on peer-to-peer networks can be added with access passwords, they are very easy to crack. In a peer-to-peer network composed of Windows 9x, the transmission of data is very insecure.

However, in the "domain" mode, at least one server is responsible for the verification of each computer and user connected to the network, which is equivalent to the doorman of a unit, called "Domain Controller (Domain Controller, abbreviated as DC).

The domain controller contains a database composed of the account, password, computers belonging to the domain, etc. When the computer is connected to the network, the domain controller must first identify whether the computer belongs to this domain, whether the login account used by the user exists, and whether the password is correct. If any of the above information is incorrect, the domain controller will refuse the user to log in from this computer. If you cannot log in, the user cannot access the resources protected by permissions on the server. He can only access the resources shared by Windows in the form of peer-to-peer network users, which protects the resources on the network to a certain extent.

To add a computer to the domain, it is far from enough to make it and the server "see" each other in the online neighbors. The network administrator must make corresponding settings and add the computer to the domain. This is how to achieve file sharing.

1. Server-side settings

Log in as a system administrator on Windows 2000 Server where Active Directory has been set up, select "Administrative Tools" in the "Programs" option in the "Start" menu, then select "Active Directory Users and Computers", then right-click "Computers" in the program interface, click "New" in the pop-up menu, then select "Computers", and then fill in the name of the computer you want to join the domain. The computer name to join the domain is best in English, as Chinese computer names may cause some problems.

2. Client settings

First, you need to confirm whether the computer name is correct, then right-click the mouse on the desktop "Online Neighbor" and click "Properties" to display the network attribute settings window, and confirm that "Main Network Login" is "Microsoft Network User". Select the "Microsoft Network User" above the window (if this item is not available, it means that there is no installation. Click "Add" to install the "Microsoft Network User" option). Click the "Properties" button, and the "Microsoft Network User Properties" dialog box appears. Select the "Login to Windows NT Domain" check box, and enter the domain name to log in to in "Windows NT Domain". At this time, if it is a Windows 98 operating system, the system will prompt you to restart the computer. After restarting the computer, a login dialog box will appear. After entering the correct domain user account, password, and login to the domain, you can use the resources in the Windows 2000 Server domain. Please note that the domain user account and password here must be the account and password created by the network administrator for the user, rather than the account and password created by the local user himself. If the computer is not added to the domain, or if the domain, username, or password you are logged in is incorrect, an error message will appear.
Article entry: csh     Editor in charge: csh