![]() If you have DPs in multiple domains that don’t all trust each other you will need multiple NAAs. The client then retries with the Network Access Account (NAA). Since workgroup clients won’t have an Active Directory (AD) object that will always fail. Every client will first attempt to authenticate with their local computer account. ![]() Particularly, how they authenticate to the distribution points (DP) when they need to download content. One of the critical differences between workgroup and domain clients is how they authenticate. Microsoft Doc: Manage accounts to access content in System Center Configuration Manager If I miss something, let me now and I’ll add it. Like all things however, there are exceptions to that rule and I will attempt to explain them all here. ![]() For the most part, Configuration Manager just doesn’t care whether your device is domain joined or not. Whether or not Configuration Manager can manage workgroup devices is a question that comes up fairly often on the Technet forums, Reddit, Slack, what-have-you. However, for reasons that fall along the full spectrum of rational thought you may chose not to. If you’re using Configuration Manager to manage clients then chances are you have the Client Access Licenses (CALs) to join them to the domain.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |