Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Can a client pc authenticate against a Kerberos / KCD authenticated service (that is - not use NTLM) if they have valid domain accounts, but the pc they're using can't access any of the DCs and / or isn't a member of the domain itself?

share|improve this question
add comment

1 Answer 1

I don't think this strictly answers your question, but I see two points to be made here:

  1. Can a user log on to the domain from a computer not joined to the domain? The answer is no, as far as I'm aware.

  2. Can a user access domain resources from a computer not joined to the domain? The answer is yes.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.