The difference between a domain and a workgroup. How to fix a domain or workgroup. Basic security measures when working on a network

Windows XP Professional supports two network environments where users can share common resources regardless of network size: workgroups and domains.

Working group(workgroup) Windows XP Professional is a logical grouping of networked computers that share common resources such as files and printers. The working group is also called peer-to-peer network(peer-to-peer network), because all computers in it can use shared resources on equal terms, i.e. without a dedicated server.

Each computer in a workgroup maintains a local security policy database. This database is a list of user accounts and information about access rights to resources on the computer where it resides. Therefore, using the local computer security policy database decentralizes administration of user accounts and resource access policies in a workgroup.

Since workgroups decentralize administration and resource access policy, the following statements are true:

Ø the user must have his own account on each computer he wants to access;

Ø Any change to user accounts, such as changing their password or creating a new account, must be done on each computer in the workgroup. If you forget to register a new account on one of the computers in your workgroup, the new user will not be able to access that computer and its resources.

The working group has the following advantages:

Ø it does not require the inclusion of a domain controller in the network to store centralized information about security policies;

Ø It is easy to design and operate. Unlike a domain, it does not require large-scale planning and administration;

Ø It is a convenient network environment for a small number of computers located not too far from each other. However, the organization of a workgroup is impractical in networks containing more than 10 computers.

Domain(domain) is a logical grouping of computers on a network that share a central directory database. The directory database contains user accounts and security policy information for a domain. This database is called a directory and is part of the Active Directory database, the directory service of Windows 200x Server.

In a domain, the directory is located on computers - domain controllers. Domain controller(domain controller) is a server that coordinates all security settings between the user and the domain and centralizes the administration and management of security policies.

Only a computer running Microsoft Windows 200x Server can be a domain controller. If all computers on the network are running Windows XP Professional, then the only type of network available will be a workgroup.

Each domain controller stores and maintains a copy of the directory. In a domain, you create a single user account that Windows 200x writes to a directory. When a user logs on to a domain computer, the domain controller authenticates the user by checking the directory for the user's account, password, and logon restrictions. If there are multiple domain controllers in a domain, then they periodically exchange data for their copies of the directory.

A domain has nothing to do with a network location or a particular type of network configuration. Computers in a domain can be located side by side on a small local area network (LAN) or located in different parts of the world. They can communicate with each other over any physical connection, including phone lines, ISDN lines, fiber optic lines, Ethernet lines, token ring networks, frame relay connections, satellite communications, and leased lines.

The advantages of a domain are obvious:

Ø centralized administration, because all information about users is stored in one place;

Ø One-time user registration to gain access to all network resources (files, printers and programs) with the required access rights. In other words, you can log on to one computer on the network and use the resources of another computer, provided that you have the appropriate access permissions;

Ø scalability, which allows you to create very large networks.

Hello, dear readers of the blog site. This blog has a detailed one. After or while reading this publication, I advise you to read that article in order to get a complete picture. I also advise you to read my publications on the topic, which means and.

Today we have on the agenda the question - what is domain or domain name(in fact, they are synonyms). Well, it's actually quite simple. This is the site name., which is assigned to it instead of the hard-to-remember IP address of the server hosting this site (see). Enter this name in the address bar of the browser and the site opens.

But the difficulty lies in the details. What they are, how it all works, what are domain zones, how to understand which level domain and which of them can be registered, where you can do it and which zone to choose. There are many questions and I will try to answer all of them in this "small note".

What is a domain?

As I mentioned above, domain is the name for the site..162.192.0. Also, imagine the situation. You have placed a site on a hosting server (see above for what it is) and received an IP address. But, moving to another hosting IP will change, which will cause a disaster. But in the case of domain names, this will not happen. Why?

The fact is that there are thousands of DNS servers (domain name systems) on the Internet, which will state that the domain site is available at IP address 108.162.192.0. If I move to another hosting, then I go to the domain name registrar panel (where I bought it), change something and it will be written in all Internet DNS servers that the site should be searched for at a different IP address. Is it convenient?

Convenient, but probably not clear yet. The main thing to understand is website name is very important thing and it is for life (as a rule, although you can transfer the site to another domain if you wish, but this is not easy). Whatever you call a boat, that's how it will float. True, not only the name is important, but also the level of the domain, as well as the zone to which it belongs. Again unclear? Well, let's go in order.

How a domain name works

Let's start with the basics. The domain record (site name) must include all nesting levels of the domain (all zones it belongs to) so that it is unique and there is no confusion.

There are two main rules for recording domain names:

The zones that this domain belongs to are listed from right to left.
Points are used as a separator.

It might look like this, for example:

Net.blog.site

We get the fourth-level domain net, which is part of the third-level domain zone "blog", which is part of the second-level zone "ktonanovenkogo" belonging to the first-level zone.ru. Nonsense, right? (my wife, who checks for errors in the article, will confirm this with pleasure).

What are the levels of domains

Root domain(zero level) is considered an empty entry, denoted simply by a dot (.). In theory, the full record of a domain name should always end with a dot, but in most cases it is omitted (as if meaning) and instead of the record: site.
They use the already firmly established relative domain record (without a dot at the end):
This is followed by the first level - this is usually regional(national) domains (.ru, .su, .ua, .us, .de, .fr, etc.) or thematic(.com, .edu, .org, .net, etc.). But there are also first-level domain names, including national alphabets(for example, .rf).
Second level- these are the same domains that we are with you buy(we register with special registrars). Prices for them vary not only depending on whether they belong to a particular first-level domain (for example, xxxxxxx.ru is cheaper to buy, as a rule, than xxxxxxx.com), but also depending on the registrar (or its reseller - retailer).
Third, fourth, etc. - they no longer need to be bought (as a rule) and can be created independently (without registering anywhere) based on the purchased second-level domain. For example, I can create such a name for a new site - forum..forum..

Let's explain it all again For example:

. (dot) - zero (root) level domain
ru - the first level, also called top-level domain or zone
website - second-level domain name
blog.site - third level domain
net.blog.site - fourth level

Top (first) level domains

Except for the zero level (root - root domain), because it is emptiness, then the base is the so-called zones or top-level domains(it is with them that the name of any site begins, although it seems that it ends with them - but not the point). They cannot be bought by an ordinary person, but it is from these zones that we will choose when buying a second-level domain (name for our site).

So what are they like:

Domains of the first (highest) level, assigned to countries, which are usually called among very smart people by the abbreviation Cctld, which means country code top-level domain. Russia has two of them:
1. su - a vestige left over from the Soviet Union and now representing the space of resources in Russian
2. ru - originally assigned to Russia
Domains with national alphabets, which are usually abbreviated as Idn (internationalized domain name). In Russia, this is zona.rf. In fact, their names are still written in English characters (recoding takes place), but this is, as it were, hidden from view. However, if you enter the address in the browser: http://ktonanovenkogo.rf/
and after going to this site, copy its address from the address bar, you will get absolutely indigestible nonsense:
Http://xn--80aedhwdrbcedeb8b2k.xn--p1ai/ Here it turns out how unattractive it looks. And it is in this form that it will have to be added to different services (like ), and not in the form of someone new.rf. This must be taken into account. Yes, and other problems are possible, although at first they are not obvious.
Upper public domains, usually called Gtld, which means generic top-level domain, are registered (sold) regardless of the country in which the webmaster lives. The most used of them:
1. .com - for commercial projects
2. .org - for non-commercial sites of various organizations
3. .net - for projects related to the Internet
4. .edu - for educational institutions and projects
5. .biz - commercial organizations only
6. .info - for all information projects
7. .name - for personal sites
8. .gov - for US government agencies

How and where can I register (buy) a domain in top-level zones

Second-level domain names, as a rule, cannot be obtained just like that (and it is better not to try, because the name for the site is too important to risk registering it with no one knows who). They cost money. And payment is made per year, and then the domain lease needs to be renewed.

Once again I will draw your attention - buy second-level domain names, and everything above - you can create yourself on their basis. This is usually done in your hoster's panel in the subdomains section - these are domains of the third and higher levels, such as blog..blog.site.

There are not so many such companies (bright examples are RegRu and webnames), but they may have a whole network of resellers (partners) who will be engaged in the selection and sale of domains on their behalf. If the current reseller did not satisfy you with something or you had trouble with it, then by contacting the registrar, you can choose another reseller or go directly under the wing of the registrar.

At all no limits you can buy domains in the public domains .com, .net, .org, .info, .biz, and .name. In the .edu, .gov, and .mil zones, however, this option is available only for institutions, as well as educational and military institutions of the states. There are also a number of specialized first level domains, such as .travel, .jobs, .aero, .asia.

Second-level domain names in these public areas can be purchased from any registrar(not only national), which, in fact, is used by some resources that may have conflicts with copyright holders. The same torrent was forced to move to the public zone org, because its resource was blocked in the national domain zone ru.

Second level domains - busyness check and Whois

About half a billion domain names have already been registered on the Internet in various zones, so choosing a good (short, simple, sonorous) name in the right zone is now very not an easy task(just like hard). A third of the registered names are not used at all, because they were bought for resale (successful domains can be expensive in the secondary market - sometimes many millions of dollars).

Checking a domain name for availability

Therefore, the first thing to do when choosing a suitable domain for a site is . This can be done with different registrars (the result will be the same, because they use a common database).

Therefore, when viewing information about a domain in the so-called whois records, you can find your personal data there, which was required during registration. In my opinion, it is better to hide this information, because there are enough dashing people on the Internet (although if you need problems out of the blue...).

Domain name history and purchase of vacant domains

The history of domain ownership can be traced in the so-called . There you can clearly see what kind of sites were ever placed on this domain name, what they were like and whether their history will affect the initial attitude of search engines to your site.

Just below are currently released domains(for a detailed view, click on the price):

Good luck to you! See you soon on the blog pages site

2.2.5 Windows Implementation Features

Four concepts are used:

Job - a set of processes with shared quotas and limits

Fiber is a lightweight thread managed entirely in user space

Threads run in user mode, but on system calls they switch to kernel mode. Due to switching to kernel mode and back, the system slows down very much. Therefore, the concept of fiber was introduced. Each thread can have multiple fibers.

Lecture 2. OS workstations and servers. Working groups and domains. Active directory. Primary servers and services in the enterprise network.

Working groups and domains.

Domain is a logical grouping of computers on a network that share a central directory database. The directory database contains user accounts and security policy information for the domain. This database is called a directory and is part of the Active Directory database, the Windows directory service.

In a domain, the directory is located on computers - domain controllers. A domain controller is a server that coordinates all security settings between user and domain and centralizes the administration and management of security policies.

You can only designate a computer running one of the Microsoft platforms of the Windows Server 2000/2003/2008 series as a domain controller. If all computers on the network are running Windows XP/Vista/7/8, then the only available network type will be a workgroup. In the future, in the lecture notes, for brevity, we will call all server versions Windows Server, and the operating systems of Windows XP / Vista / 7/8 workstations will be called Windows for Workstations.

Domain Advantages obvious:

Centralized administration, because all user information is stored in one place;

One-time user registration to gain access to all network resources (files, printers and programs) with the required access rights. In other words, you can log on to one computer on the network and use the resources of another computer, provided that you have the appropriate access permissions;

Scalability, which allows you to create very large networks.

The types of computers that a typical Windows domain includes are listed below.

Domain controllers on the Windows Server platform. Each domain controller stores and maintains a copy of the directory. In a domain, you create a single user account that Windows writes to a directory. When a user logs on to a domain computer, the domain controller authenticates the user by checking the directory for the user's account, password, and logon restrictions. There can be multiple domain controllers in a domain, and they periodically exchange their copy of the directory data.

Server without controller status in a specific domain. The member server does not maintain a directory and is unable to authenticate users. Member servers share network resources, such as shared folders or printers.

Client computers on Windows XP/Vista/7/8 or any other Microsoft operating system not used as a server. Client computers are user desktops that provide users with access to domain resources.

Windows workgroup A logical grouping of networked computers that share common resources such as files and printers.

A workgroup is also called a peer-to-peer network because all computers in it can use shared resources on equal terms, i.e. without a dedicated server.

Each computer in a workgroup maintains only its own local security database. This database is a list of user accounts and information about access rights to resources on the computer where it resides. Therefore, using the local computer security policy database decentralizes administration of user accounts and resource access policies in a workgroup.

Note: A workgroup can include computers running Microsoft platforms such as Windows Server in addition to client OS computers, unless, of course, it is configured as a domain controller. In a workgroup, a Windows Server computer is referred to as a stand-alone server.

Since workgroups decentralize administration and resource access policy, the following statements are true: a user must have his own account on every computer he wants to access; any change to a user's accounts, such as changing their password or creating a new account, must be done on each computer in the workgroup.

If you forget to register a new account on one of your workgroup computers, the new user will not be able to access that computer and its resources.

The working group has the following advantages:

It does not require a domain controller to be included in the network to store centralized information about security policies;

It is easy to design and operate. Unlike a domain, it does not require large-scale planning and administration;

This is a convenient network environment for a small number of computers located not too far apart.

Lecture 3 Creation and user and computer account management (in a domain)

User account is a record that contains the information necessary to identify the user when connecting to the system, as well as information for authorization and accounting. (difference between identification and authorization?)

This username and password (or other similar means of authentication - for example, biometric characteristics). The password or its equivalent is usually stored in encrypted or hashed form (for security purposes).

To increase reliability, along with the password, alternative means of authentication can be provided - for example, a special secret question (or several questions) of such content that only the user can know the answer. Such questions and answers are also stored in the account.

The account may contain the following additional personal data about the user:

patronymic;
alias (nickname);
nationality;
race;
religion
blood group;
Rh factor;
date of birth;
E-mail address;
home address;
business address;
netmail address;
home phone number;
work phone number;
cell phone number;
ICQ number;
Skype ID, IRC nickname;
other contact details of instant messaging systems;
homepage and/or blog address on the Internet or intranet;
information about hobbies;
information about the range of interests;
family information;
information about past illnesses;
information about political preferences;
and much more

An account may also contain one or more photos or an avatar of the user. The user account can also take into account various statistical characteristics of the user's behavior in the system: the duration of the last login to the system, the duration of the last stay in the system, the address of the computer used when connecting, the intensity of system use, the total and (or) specific number of certain operations performed in the system, etc.

In small enterprises, where the number of computers is up to 20 pieces, computers are usually connected to the network for sharing files, folders, printers and the Internet with help working groups. Home users also face the situation when they need to exchange files with a second or third computer (laptop), play games together, print on a shared printer. This article provides step-by-step instructions on how to add a new computer running Windows 7 and Windows Vista to such a workgroup, or create such a group from scratch.

Open the "System" icon in the Control Panel (Start - Control Panel - System and Security - System)

Click the "Edit" button

The computer name must be unique as part of the network, short, written English letters. The name of the working group must be the same on all computers this working group, short and also English letters.

You can add some description to the computer name (optional) and click the "Close" button

You must restart your computer for the changes to take effect.

Register IP addresses

If the IP parameters in your network are not assigned automatically, they must be entered manually ( check the need for this item with the administrator of your working group!). To do this, you need to take the following steps:

Open the "View network computers and devices" icon in the Control Panel (Start - Control Panel - Network and Internet - View network computers and devices)

On the network adapter with which you are connected to the network, right-click and select "Properties"

Select "Internet Protocol Version 4 (TCP/IPv4)" and click "Properties"

We register the IP address (1). In it, the first three values are the same for all members of the working group. The last digit (2) is unique for each computer. Subnet mask, Default gateway (4) Preferred DNS server (4) - the same on all computers.

Ask your administrator for general values for the entire workgroup, or look at a computer that is already a member of this group. Default Gateway and Preferred DNS Server are required for Internet Sharing. If this is not the case, then these fields are not filled.

What is the difference between a domain and a workgroup?

2 replies

the real answer to this question is:

Domains, workgroups, and homegroups represent different methods for organizing computers on a network. The main difference between the two is how the computers and other resources on the networks are managed.

Windows-based computers on the network must be part of a workgroup or domain. Windows-based computers on home networks can also be part of a homegroup, but they don't have to be.

computers on a home network are usually part of a workgroup and possibly a homegroup, while computers on work networks are usually part of a domain.

in the working group:

all computers are network peers; no computer can control another computer.

each computer has a set of user accounts. To log on to any computer in a workgroup, you must have an account on that computer.

there are usually no more than twenty computers.

the workgroup is not password protected.

all computers must be on the same local network or subnet.

in domain:

one or more computers are servers. Network administrators use servers to manage security and permissions for all computers per domain. This makes it easier to make changes because the changes are automatically made on all computers. Domain users must provide a password or other credentials each time they access the domain.

If you have a user account in the domain, you can log on to any computer in the domain without an account on that computer.

you can probably only make limited changes to your computer's settings because network administrators often want to ensure consistency among computers.

There can be thousands of computers in a domain.

computers can be in different local networks.

If your computer is on a large network at work or school, it probably belongs to domain. If your computer is on your home network, it belongs to groups and may also belong to home group. When setting up a network, Windows automatically creates a workgroup and names it WORKGROUP.