5

How do organizations like schools or hospitals set up their network where you need to login into their organization through Windows?

I've attempted to research myself, but I'm not getting clear answers. Windows Server? Radius? Active Directory?

(My cousin has a non-profit organization, only 15-20 users. I set up a NAS storage device for the users and shared it over Networking Sharing and enabled authentication for each user on the drive. I want to make it much more professional and have it where you actually own a network account ran by the organization (or me) so that it works more seamlessly and can be better managed from the top down.)

  • 6
    I disagree with the "close" vote here. It's a definite "i have no idea where to start" question but that's not off-topic. The user has a specific technology question and even a desired end-state, they're just asking what tool(s) to use to get there. – mfinni Apr 23 '17 at 15:10
9

Yes, you use AD and Windows servers. You need to have at least one, but seriously you want two, Domain Controllers running on Windows servers. Doing this will create a domain. Then you join each workstation to the domain you created. Then, everyone's user account lives in AD. Depending on the NAS unit, you should be able to also join it to AD, or at least use AD credentials in some fashion.

This gets you a lot of benefits because now you manage the user accounts in one place, and can apply GPOs to manage those accounts. You can now also manage the workstations using GPOs.

Since the organization is a non-profit, they can probably take advantage of discounted pricing for the Windows Server licenses needed for this.

Also, if this is important to the business, they should probably hire a professional who already knows this. I applaud your desire to help, but the IT assets of a non-profit should not be your testbed or learning experience, without the benefit of someone who knows what they're doing. I suggest you pitch it as an opportunity for you, who presumably knows something about the business, to act as the internal contact and manage the work of a consultant or MSP, and explicitly put in the contract that you'll need documentation and knowledge transfer. This is more business and career advice than a technical component of the answer, but it will serve you and your cousin's non-profit better than you just trying things until they work (or don't.)

/Further edit - RADIUS is typically used by network devices to connect to another authentication source, like LDAP or AD. It's most often used (IME) when you want VPN connections, or wireless or even wired authentication, to be tied into your organization's central authentication mechanism, like AD. Even though AD is over 15 years old, most network vendors don't support it directly and require other protocols, typically vendor-neutral ones like RADIUS. I think there are Windows GINA modules that can tie into RADIUS, but that's kind of a steampunk way to get things done and you lose out on most of what AD offers, and you'll still need a RADIUS server and something for it to authenticate against.

  • RADIUS is usually provided on top of an existing AD domain, instead of the other way around. – grawity Apr 23 '17 at 19:11
  • 1
    Do you think that Azure AD might fit the OP's needs? I haven't tried it before, but it seems like it might reduce deployment complexity/cost, especially if BizSpark'll provide it for free (dunno if the non-profit in question might qualify). – Nat Apr 23 '17 at 19:22
  • Thanks for this answer, greatly worded. I think I will take your advice on receiving outside help, and ill try to learn the process as we go. At least I know what I research now in confidence, thanks! – TrevorKS Apr 23 '17 at 19:37
  • 1
    As a non-profit, you'll want to look into TechSoup. That's the organization Microsoft uses to provide their non-profit benefits. – Dylan Knoll Apr 24 '17 at 0:38
  • @Nat AzureAD probably won't fit the bill, unless the NAS device will be able to do an Azure domain join. – mfinni Apr 24 '17 at 14:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.