Workgroup vs. Domain sharing

w^rl0rd

I know that in a workgroup, you must have a local user acct on a machine if you want to access it's shared resources from another machine, but what if you are in a domain environment? Can't you just share a folder, printer, etc. and have users access it by the UNC path without creating a local user acct on the machine?

Webmaster

You can, and you are supposed to do exactly that; create domain user/group accounts instead of local accounts when the computer is a member of the domain, and assign permissions for the domain accounts to the shared resources.

NPA24

In my experience the only local user accounts that are usually created for a local pc in a domain is the Administrators and sometimes a service account which is designated to run various tasks.