Workgroup and domain - shouldn't be but is working?

jsheflin

Distinguished
Jun 22, 2009
3
0
18,510
hi,

this is my first active directory/domain controller install

we are migrating from a workgroup to a domain

i'm half-way thru

what's odd is, i joined the windows servers to the domain

i joined some of the windows 7 pro machines to the domain

all seems fine

but when i go to an XP machine, it is able to get to the domain-ed windows 2008 r2 servers without logging in to/ or changing over from workgroup to domain

seems very odd to me- i thought workgroup and domain were mutually exclusive on a network

maybe i just left my servers too wide open?

thoughts?

thanks
 
Permissions issues. You need to deny access to non-domain users. That is all. The server has an IP so it will be visible to workgroup machines, or any system for that matter unless you are running a complicated firewall / router setup.
 

jsheflin

Distinguished
Jun 22, 2009
3
0
18,510



thanks for response - so why is it bad to allow access to non-domain users?

the majority of my (inherited) users are on XP home, which obviously don't join a domain (legitimately), and upgrading them all to 7 pro will be quite an expense

it will happen, but not right away

anything i should be wary of?

thanks again