HP CIFS Server Administrator Guide Version A.03.01.03 (5900-2006, October 2011)

4 Windows style domains
Introduction
This chapter describes how to configure the roles that an HP CIFS Server can play in a Windows
style domain, whether it is a Samba Domain, consisting solely of HP CIFS Servers, or as a Windows
domain with a Microsoft Domain Controller (DC). Configuration of Member Servers joining a
Windows 2000 and Windows 2003 Domain as a pre-Windows 2000 compatible computer is
described here. Chapter 5, Windows 2003 and Windows 2008 Domains, should be consulted
for configuration of Member Servers joining Domains with a Windows 2003 or Windows 2008
Domain Controller as an ADS Member Server. Chapter 9, HP CIFS Deployment Models describes
further how the server roles can be utilized in common network deployments.
HP CIFS Server can be configured to play different roles in an Windows style Domain Model
including:
• Member Server in a Windows 2003 or Windows 2008 Domain with a Microsoft DC
• PDC in an Samba Domain where an HP CIFS Server serves as the PDC
• Backup Domain Controller (BDC) in an Samba Domain where an HP CIFS Server serves as
the PDC
• Member Server in an Samba Domain where HP CIFS Server serves as the PDC
Advantages of the Samba Domain Model
The HP CIFS Server PDC domain model provides a number of advantages:
• HP CIFS Server PDC domain administrators may group workstations and servers under the
authority of a domain controller
• Domain members may be centrally administered by using domains to group related machines.
One of the benefits of this is the ability for user accounts to be common for multiple systems.
A user may now make one password change which will affect multiple systems accessed by
that user. Another benefit is that IT administration work is reduced, since there is no longer a
need for individual accounts to be administered on each system
• HP CIFS BDCs may be configured to off load some of the HP CIFS PDC authentication
responsibilities and can be promoted to a PDC if the PDC fails or needs to be taken out of
services.
Primary Domain Controllers
The Primary Domain Controller (PDC) is responsible for several tasks within the domain. These
include:
• Authenticating user logon for users and workstations that are members of the domain
• Acting as a centralized point for managing user account and group information for the domain
• A user logged on to the Primary Domain Controller (PDC) as the domain administrator can
add, remove or modify Windows domain account information on any machine that is part of
the domain
54 Windows style domains