Joining a WinXP workstation to a remote Win2003 domain

Once again I had to join a newly reinstalled laptop to a remote domain, and create a domain user’s account on the local laptop. I have to do this so randomly that I always forget what the steps are in between. This time I documented it. Here are the steps.

1. Login as Administrator on the workstation you want to join to a remote domain, and create a VPN-connection to the remote domain. Make sure you “Save this user anme and password.. for Anyone who uses this computer”. After the setup has finished, go to the Properties of this connection (double-click on the icon on the desktop if one was created, or go to My Network Places > View Network Connections and double-click on the VPN connection icon there, then click on Properties) and check “include Windows logon domain” in the “Options” tab. Click on OK, then…

2. Connect to the Domain Controller with that VPN-connection using the administrator’s credentials, then join the domain:

  • After the VPN connection has been established, right click My Computer, then select Properties > Computer Name > Change
  • Enter the computer’s name, and check “Domain” and fill in the name of the domain you’re joining (domain suffix is probably also needed; click on “More” and enter the domain’s primary DNS suffix which may be “.local”, or the [internet] domain name used by the [Windows] domain).
  • Enter the login name and password of an account that is allowed to join a user/workstation to the domain.
  • After a few moments you will get the “Welcome to domain” message and the remark that you will have to reboot the workstation; proceed with reboot.

3. Log in with the user name you want to login to the domain as (and likely to create a local workstation account for the domain user):

  • Fill in the name, password, and the domain name of the user at the login prompt. Select the domain name of the domain we just joined (from the drop-down menu).
  • Check “Log on using dial-up connection”; since this is likely the first time this connection is used, you’ll be asked for an area-code, etc. VPN RAS uses the same interface as the regular dial-up, so enter the requested information here though it has no relevance on the VPN connection.
  • When you OK the dial-up setup, the connection proceeds; you may be prompted for the login credintials of the domain admin user with privileges to join users to the domain.

    ** NOTE: SOMETIMES YOU’LL HAVE TO TRY THIS A FEW TIMES BEFORE IT WORKS. IF THE USER LOGIN FAILS ON THE FIRST ATTEMPT, TRY AGAIN (YOU’LL HAVE TO DISCONNECT THE VPN CONNECTION, THEN TRY AGAIN AS DESCRIBED ABOVE.) This is probably due to the same unknown cause that usually results in the first Remote Desktop connection to fail after a VPN tunnel has been established.

  • The local account is now created for the domain user. Logout.

4. Make the newly created local account for the domain user an Administrator. Log in as the local system administrator, go to Settings > Control Panel > User Accounts, then select “Add” and add the newly added domain user as the local Administrator by typing in the user name, the domain name, and selecting the user level as “Administrator”.

  • logout, then login as the newly created domain user (be sure to select the domain name rather than the local computer from the drop-down menu at the login prompt).

Done!

The above steps being for WIndows XP Pro, for Vista the steps differ some.  On msgoodies blog there’s a brief mention of the procedure on Vista:

In Vista there is no Logon using dial-up networking option (Or at least I haven’t found it 😉 ) instead the trick is to create a VPN connection, dial-up to your company, join the domain, reboot and then logon with the local user. Then dial-up to your VPN again and selest padlock icon, Switch User (While keeping you VPN connection open) and now logon to you domain account.

Widescreen multiple monitor desktops (or The End of 2:3@1600×1200 LCDs)

I just realized that most manufacturers have discontinued 2:3 (non-widescreen) 20″ (or any size, for that matter) LCD-monitors. Everything is widescreen. But how about many existing applications that call for 2:3 format display panels?

The following was revised/rewritten on 14 October 2008, after I got some feedback from Ergotron that substantially changed the facts on what I wrote yesterday:

I’ve been using Ergotron’s LX display stand for some time now, and have really become accustomed to the large, wrap-around desktop space the LX stand equipped with three 20″ 1600×1200 pixel displays have offered. That’s 4800×1200 (or 5,760,000) pixels. The most common replacement for 1600×1200 displays seems to be the 1680×1050 widescreen format even though the actual upgrade for the 1600×1200 displays is the 1920×1200 resolution. Display for display the 1680×1200 pixel monitors offer 156,000 pixels less desktop space than 1600×1200 models.

The Ergotron LX stand I’m currently using would fit just two of either the 1680×1050 or 1920×1200 displays as they’re “widescreen”. Dual-widescreen setup using the previous displays offers 3360×1050 (3,528,000) pixels, or 3840×1200 (4,608,000) pixels respectively. Either configuration provides still less desktop space than triple 1600×1200 display.

There are couple of alternatives for triple-monitor setup using the widescreen displays. Firstly, Ergotron LX stand supports one 1600×1200 2:3 monitor in the middle, and two 1920×1200 widescreen monitors on the sides. That will produce a large combined 5440×1200 (6,528,000) pixel display!  Yet a better option is  Ergotron DS100 which supports three1920x1200 displays resulting in an even larger 5760×1200 desktop. That’s probably the best economical option at this time, yet it’s a far cry from Al Gore’s triple-HD-setup, which offers a gigantic desktop of 7680×1600 (or over 12 million) pixels — almost twice as much desktop space as our econo choice.

To recap, for a multi-monitor setup I would at this point recommend Ergotron DS100 stand with three Samsung 2443BWX widescreen 1920×1200 pixel displays. Or, if money is not an object, triple “HD” displays (Apple or Samsung), or perhaps 9XMedia‘s insane fifteen monitor stand! 😀

Microsoft Trackball Explorer, discussion continues

I’ve today posted an update to the original 03 July 2007 article about the demise of the venerable Microsoft Trackball Explorer pointing device. Check out the original article, the update (following the original article), and the countless comments the post has received over the past year. What’s the matter with Microsoft?!

Open with UE Studio – Context Menu option for all files

I often want to open random files in my favorite text editor, UltraEdit Studio to take a quick peek at the contents. However, often the files don’t have a recognized extension, have an extension that is associated with something else, or have no extension at all. Some time ago I added a link to the “Send to” menu, which works, but it’s always an extra step to navigate to the Send to sub-menu first. This is a common operation. Google search quickly produced a post in Wes’s Puzzling Blog that outlines how to add a context-menu option for Notepad. It worked, almost. I had to make one small change (besides the cosmetic text change from “Notepad” to “UE Studio”).

Here’s my version:

[HKEY_CLASSES_ROOT*shell]

[HKEY_CLASSES_ROOT*shellopenuestudio]
@="Open with UE Studio"

[HKEY_CLASSES_ROOT*shellopenuestudiocommand]
@="c:\Program Files\UEStudio 06\uestudio.exe" %1

I had to move the file variable %1 outside of the quote marks in order for it to work, possibly because there is a space in the file path.

You can also download open_with_uestudio.reg that, once saved (with .reg extension) to a local hard drive, can be used to add the necessary keys into the registry by double-clicking on the file (obviously it only works unmodified if you have UE Studio installed, and in the same path as on my system). This works on Windows XP and Windows 2003 Server, not sure about Vista.

Disclaimer: Always be careful when editing/modifying registry. This worked for me but I’m not responsible for broken installs if you mess it up!