Windows > The Windows 2000 Domain

Fermilab's Windows 2000 domain is a network of Windows 2000 computers for which strong authentication has been implemented. Our Windows 2000 domain is named FERMI.WIN.FNAL.GOV; note the upper case. It is commonly referred to as the "Win2K domain" or the "FERMI domain". Desktops, servers and other computing resources that belong to it require authentication to the domain prior to use, Kerberos being the default protocol used.

Once you obtain a Kerberos principal you will be able to authenticate to this domain and thereby access some subset of the servers and resources, as configured for your group.

If your desktop Windows 2000 system has been added to the domain, you will log directly into the FERMI domain when you log into your desktop. This will require entry of your (FERMI) Kerberos password, and you'll be automatically authenticated to the domain. The domain resources will be mounted and immediately available to you. Ask your supervisor whether this has been done for your desktop. If not, you will need to log into your desktop and authenticate to the FERMI domain (via the NTLMv2 protocol, in this case) as separate operations, and then map the resources manually.

Whether or not your desktop has been added to the FERMI domain, once you're logged on you can connect to remote Kerberized UNIX hosts over the network (see Windows > Remote Host Connections).

previous | next

Orientation Home | General Computing | Windows | UNIX | Kerberos (technical)