machines outside domain

[khers]

Hi all
We have some machines in our network, and the questions has raised
about wether we could have these machines outside our domain policy.
My question is:
Is it safe to have computers (Mac and PC) within the organization (on
their own sub-vlan) which are not members of our windows 2008R2
domain? What are the risks?

cheers
Khers

[neo]

The question is kind of vague in where each of us will wonder what safe
means. To answer the question, sure, you can have a device not joined to
the Active Directory environment but it raises questions on how does it fit
into the corporations overall strategy of managing that device from a
central standpoint.

This could range anywhere from the basics of overall patch/hotfix
management, antivirus updates, asset management (software/hardware
inventory), .etc.

Other things that come to mind are non-joined workstation won't be able to
use DFS paths. Extra work in regards to user account management on
standalone devices.

Post by khers
Hi all
We have some machines in our network, and the questions has raised
about wether we could have these machines outside our domain policy.
Is it safe to have computers (Mac and PC) within the organization (on
their own sub-vlan) which are not members of our windows 2008R2
domain? What are the risks?
cheers
Khers

[khers]

Post by neo
The question is kind of vague in where each of us will wonder what safe
means.  To answer the question, sure, you can have a device not joined to
the Active Directory environment but it raises questions on how does it fit
into the corporations overall strategy of managing that device from a
central standpoint.
This could range anywhere from the basics of overall patch/hotfix
management, antivirus updates, asset management (software/hardware
inventory), .etc.
Other things that come to mind are non-joined workstation won't be able to
use DFS paths.  Extra work in regards to user account management on
standalone devices.

Post by khers
Hi all
We have some machines in our network, and the questions has raised
about wether we could have these machines outside our domain policy.
Is it safe to have computers (Mac and PC) within the organization (on
their own sub-vlan) which are not members of our windows 2008R2
domain? What are the risks?
cheers
Khers- Hide quoted text -

- Show quoted text -

...

Hi
thanx for replaying. my question is more what are the pros and cons
for allowing some computer not be a member of domain. You mentioned
some cons (patch/hotfix, antivirus) are there other cons? Are there
any pros at all?

cheers
khers